The way "instant personalization" works is that when you a visit one of the few sites where this is turned on, you are automatically logged in using your Facebook account (if you have one) without asking you first. The lack of explicit consent for linking accounts on two different web sites together is the privacy violation.

Once you know about this you can turn off that feature in your Facebook settings.