I went out with a girl who works at Facebook (she does software development) and asked her this very question.

Basically her response was that the whole incident really isn’t even Facebook’s fault but rather the third party developers. Even though Facebook could have done a better job of protecting data, it’s a waste of time to do so as these companies will always find a way to violate the TOS. It’s a bit like fighting software piracy or ad-blocking, hackers are always getting a step ahead. No company is perfect, despite everything Facebook still does a lot of good in the world, and as a company it’s going to keep doing more of it. There’s a lot of people who hate Facebook for personal or business reasons, but in the end there’s no fundamental reason why Facebook is a bad company that shouldn’t exist, it’s only going to get better anyway.