Facebook or any other website has information that ideally only I should have access to. I don't visit Facebook hq with my id in hand to get it, I use a computing device to talk to their computing device. they don't really know if it's me using that device, just that it knows information only I should have (password). The device is also my choice, they just provide general instructions for talking to theirs, or rather just comply with standards. Meaning html or whatever the total information sent from browsers and back again is called. Some browsers being difficult, they even have some code in there for them specifically. Mostly css for ie and mobile safari.
Because me visiting the Facebook building every time I want to see something or like something is ridiculous and something no one thinks happens, when these browsers request information as me they're then referred to as me, or my agent. So if data goes from Facebook to a macbook with chrome on it that knows my password, it's for all intents and purposes a two party relatiinship. No one sees that chrome, osx, my ISP, my router, my whatever; and goes "Facebook is giving data access to third parties!"
Enter mobile devices, or more accurately old mobile devices. Complying with those standards I mentioned above /html /building a quality full functionality browser is hard given their tech. They still want you to be able to use facebook, facebook still wants you using it, and you want to use it. So the device manufacturer and Facebook come up with a communication method they can use. Basically the same information sent and received as if you were using a browser and facebooks standard html, facebooks still just assuming you're on the other end because the device knows your password, but the syntax of their messages is different. Basically a more extreme version of having some funky css in there to make old IE work.
Terminology aside, am I on the right track? If so, what exactly is newsworthy about this? Is there a practical difference from a data security viewpoint between Facebook -> my Huawei phone -> me, and Facebook -> my Huawei phone -> chrome -> me?
If my user agent - the hardware /software I choose to use to talk to facebook - is hostile to me, I'm fucked either way aren't I?