That is not how ethics and laws interact. The law sets a minimum standard that can be enforced by the government with a penalty. No matter what Facebook does, they are not deciding what is or is not legal.

Ethically, you often have an obligation to do more than the bare legal minimum in order to not be a horrible person.