I think it becomes a "defaults" problem. Lots of people do not understand or care about "the social graph" so when prompted for consent to allow someone else to export them in a social graph, they simply click whatever gets them into Facebook the fastest. That also has the negative effect of giving companies an out when confronted with privacy concerns. It's like shrink wrap licenses. You can always say someone agreed, even if they didn't understand it in any meaningful way.