You are saying Facebook users willingly gave their data to CA as if it is a matter of fact. Can I refer you to the post you replied to? Facebook disputes this!

Also, no need to set up a false dichotomy. There are other possibilities. Usually, figuring out liability is a function of the court, thus this legal action. You'll probably get the answer to your question when the suit has been concluded.