Could it work as a browser plugin? And more generally, isn't it nearly impossible for FB or any other website to prevent plugins from accessing data as if they were the user?