> They were also caught a few years ago asking users to "verify their emails" by providing Facebook their email account password(2), after which FB's servers logged into the user's email account and scraped their contacts out without warning.

Why aren't developers in jail for this? Breaking into someone's email account and exfiltrating their data - disgusting. Clicking "OK" on a 500 page ToS doesn't get you out of this.

I'm so sick of this criminal behavior being brushed off as "growth hacking", "move fast and break things", or some other bullshit. The people creating this garbage should feel some shame and face real consequences.