W:re CA. FB was touting and selling this service to any and all intetested parties. It’s only retroactively that FB and others are crying foul. I mean sure, FB should not have sold thet data or made it available to any interested party, but that’s their actual business model.
Where do you get that from? My understanding is that the API used was closed in 2014, and existing applications were given until 2015 to stop using it. That's when the data was gathered, and that data was used later in 2016 by CA.
In this case, this is another API that is closed, and this application is trying to get around that. Again, I understand that this application has good intentions, and is hopefully secure, but they are still breaking the rules. If anything happens, then it's Facebook who is on the line.
Yes, being able to access your data is nice, but you also have to balance it with people trying to trick people into leaking their data for nefarious reasons. Obviously, here, it's an open source project and we can see that it's (probably) secure, but then where do you draw the line?