I'm not sure what you're saying exactly. Why facebook doesn't disable it? Because people use it. Why don't users disable/deny it? Because you can't select whi

I'm not sure what you're saying exactly. Why facebook doesn't disable it? Because people use it. Why don't users disable/deny it? Because you can't select which permissions you want to grant to application upon installation, it's either all or nothing, even though the permissions may never be used. And it's not really a shitty feature, the auto confirmation is pretty good - the permissions needed for it are shitty though, but they don't really have a choice other than completely disabling that part of application and having users enter the code manually.