A Picture Is Worth a Thousand Cookies

What I found particularly worrying that the Facebook SDK potentially can use the permissions of an embedding app to do its own thing.