Sorry, that's not an excuse here. The issue was not a breach. It was an uncaught bug that revealed the moderator's identity when they performed an action against the alledged terrorism group.

This is a process and protocol oriented issue. Facebook could have allowed the moderators to use anonymized accounts, or have better error testing.