In the Cambridge Analytica Case users where asked "do you want to share your data with that Game/quiz?" And users agreed. For average users understanding that control is hard, especially if people with bad objects are on the other side.
Having to ask the friends for approval doesn't scale.
There is the fundamental conflict between a social network platform and privacy.