So ITP does nothing to protect a user who visits facebook.com every day. Which is most of Facebook's user-base.
Reply on news.ycombinator.com