Facebook can only really enforce privacy settings on content by authenticating you, unless the content was shared publicly. That’s pretty benign.

But I abhor requiring Facebook login to merely view non-FB sites. It’s antithetical to Facebook’s stated purpose, and I think they ought to make it a TOS violation.