Although the implications are pretty damn scary and I'm disappointed in Facebook, it helps to remember Hanlon's Razor: "Never attribute to malice that which is adequately explained by stupidity."

This could possibly be a "build fast and break things" security oversight rather than a full-on Big Brother grant to external parties. We'd need more closure and proof from Facebook if this was the case.