Yes - but you could have just repeated the Fourth mistake four times. Facebook is the last organization that should be pointing out privacy issues at other companies.