3 ms·

There are much more effective tricks to use in production. You can leak user's FB token for some huge client, and you get his email/name/bio.