Part of the gaping flaw is that Facebook will very quickly disable your API account so you can't offer login with Facebook, if you're competing with them. :)