yes, but facebook "cares about user's privacy" and people here on HN will stick their head firmly into the sand and swear up and down that this is somehow excusable.
violating privacy is their business model. there are no (zero) limits to the lengths they will go to fulfill the end of violating your privacy whether or not you are a user of their service. i highly doubt any user would knowingly consent to this.