This is exactly what Apple would do to a small indie developer if they found they did something similar. Glad to hear that they aren’t afraid to do it to a company like Facebook.
However, it's very possible that if a smaller company did this that all of their certs, apps, and dev accounts would get pulled. Facebook does still get some special treatment.
I am pretty sure others have had their entire accounts nuked for less.
Users can always access Facebook through safari.