Facebook could have restricted 3rd party access to only those applications that had given permission, or provided a way to manually export it so users would become familiar with a process they should probably know anyway.