Significant portions of NYT's reporting have been highly misleading, to the extent that it's difficult to conclude it wasn't intentional.
"Facebook allowed Microsoft’s Bing search engine to see the names of virtually all Facebook users’ friends without consent, the records show, and gave Netflix and Spotify the ability to read Facebook users’ private messages." [0]
Netflix and Spotify have Messenger plugins that allow you to share movie trailers and songs from directly within the Messenger app. Spotify's desktop app also used to connect with Messenger to enable similar functionality. NYT equated having standard "read/write" permissions necessary for basic app functionality with Netflix and Spotify being able to access, store, and modify all of your private messages.
Read the comments on that article and any prior discussion of it on the internet and you'll see that many technology illiterate people misinterpreted what that meant.
Also, it's fair game to examine what Facebook has been doing, but it's also fair game to examine what NYT's motives are for scrutinizing them so closely. When Google, Twitter, Equifax, and others have been largely ignored one naturally begins to wonder if there's an underlying agenda at play.
[0] https://www.nytimes.com/2018/12/18/technology/facebook-priva...