Cambridge Analytica showed you don't need to hack. You just need to be a developer and have keys to the kingdom with a "gentleman's agreement" that you won't do anything hinky with the access you've been granted.