Of course, there are ways around this: you could make a copy of Facebook that doesn’t pin certificates.
If you have persistence, no jailbreak is needed. Would require you to binary patch the executable then resign the binary using your own Apple Dev account. Far from trivial, but still doable and without Jailbreaking.