The name of the setting is "Who can see my friends list?" not "Who can reconstruct my friends list from bits and pieces of other people's information?" With this exceptionally broad interpretation of Facebook's promises, it seems like even if they killed the ability to do this, the fact that somebody can just sit down at a computer that's logged in as you and see your friends list also makes them just as much liars.