Exactly. The parent comment completely misses what the real issue in this story and the Facebook story is. It was never really about the research app itself, but rather about how they used Enterprise keys for non-enterprise use cases. The app itself is entirely legitimate, extremely clear in what it does, opt-in and completely separate from the rest of the ecosystem.