As good as they are at 99.99% of what they do, almost every time a friend brings an example to me of Facebook doing something malicious, it turns out to be simple implementation error.