Facebook has a fully automated testing pipeline, supposedly with few human gatekeepers but not testers, and use Facebook employees as the only real testers. That gives me no confidence at all.

That is, if it truly was unintentional. In the past year, most of the "data leaks" from Facebook where entirely intentional. They might market them as accidental, but you don't accidentally write an API to expose data intentionally.