Feels like this falls ln the infosec team. Our team has a scanner that parses all* logs for passwords and PII.

We know that the infosec team at Facebook was a second class citizen. So, its no surprise that this got through.

*sampling on large sets