Facebook Graph search was like this (and creepier as people didnt always know _how_ they are searchable) nur Facebook heavily crippled this in the Last years.
But there is a lot you can still do with it.
You’re right that people didn’t understand Facebook’s privacy model. People assume that privacy by obscurity is a guarantee. Never mind that anyone could write a bot that did what Graph Search did. Graph Search was actually more conservative than it needed to be to avoid surprises.
In the end that all mattered less than the fact that it wasn’t solving a problem people had.