B. Much of your personal data is still publicly available through Facebook Graph, regardless of how much you try to lock down your profile.

I don't think this is true, as an example here is what the graph API shows about my account:

  {
   "id": "800679",
   "name": "Matthew Brown",
   "first_name": "Matthew",
   "last_name": "Brown",
   "location": {
      "id": null,
      "name": null
   },
   "gender": "male"
  }

In the past I've had to go through all of the privacy settings painstakingly to make sure nothing is public, but I don't see how it can be said that you can't hide what you want from the public / graph API.