The cynic in me keeps wondering whether this is a genuine attempt at getting some transparency points or FB wants to more precisely analyze how many people actually care...
This leak was less than 4% of a much larger leak that's not getting much attention.
Why doesn't Facebook alert users if their profile was leaked to "malicious actors" who collected profiles of "most of its 2 billion users worldwide".
https://www.washingtonpost.com/news/the-switch/wp/2018/04/04...
Scraping websites to collect public information is nothing new. Malicious actors do it all the time, as do non-malicious actors too. Google literally does it.
EDIT: I'm all for facebook messed up and we need more guarantees but lets be objective though. The CA issue is an issue, this 2 billion thing is just a web-crawler.
Sites can control whether they get crawled or not.
Facebook, for example, stops Google from crawling Facebook profiles.
But Facebook allowed "malicious actors" to access to user profiles for "most of its 2 billion users worldwide".
These 2 billion users didn't choose to expose their personal information to "malicious actors", Facebook did it without their consent.