This is almost the opposite of how “expectation of privacy” is defined in the legal sense and used in court. Where did you get your idea from? Are you thinking of that term in a security context rather than legal?
For one, you’re defining the term with respect to the spies and not the public, and for two the idea is not whether someone could spy on you given the chance, the whole idea is that when you do something in private, you can reasonably expect it to stay private and that expectation should potentially be protected by law.
“Expectation of privacy must be reasonable, in the sense that society in general would recognize it as such”
Whereas, neither the private detective, nor the police, would be breaking the law by snooping on you in the public square. So either/both would feel empowered to do so, because society does not think such an action is worthy of punishment.
I've honest never understood how the expectation of privacy arose from using Facebook. You are literally sending your information to Facebook.
If anyone is at fault here, it's browser makers who enable sending your data to Facebook. Facebook isn't reaching into your computer "stealing" your data. It's recording what is being sent. Obviously talking about the web site here.