Yeah, people need to realize that it's not using FB that really empowers it, but allowing FB to use you.

If you're not blocking all FB owned domains, IPs, embeds, cookies, and ads (placed via it's network), then you're still getting used.

This goes for both client-side and server-side "users."