Personally, I would not sell access to my data.

Re friends opting out, no, you would just need the system to exclude individuals who have the opt-out attribute from the graph search. But I do also have timeline review turned on and have for years.

I get that I am probably a minority user of Facebook, in that I have very customized security and privacy settings. To me, there has always been value in choosing with whom to share certain information. It isn't a global binary function.