True, but they also show a preview of the page in the message, which would require fetching it. Pretty much every messaging service does that now. Also, there are legitimate reasons to scan URLs (malware, for example). Again, not trying to defend Facebook or absolve them of violating privacy, just saying that for these specific criticisms, there are technical explanations.