Everyone trying to be funny here except that you’re all missing the point.

That data was public in the first place. These extensions can scrape anything, including your messages.

Also in early times they gave quite open access to the data via API, so that everybody ties to them and everybody uploads data. Once they were big they reduced the APIs and monopolized the data they collected. (Not giving broad access via API is a good thing, see discussions around Cambridge Analytica and others)

Break the rules until you're big enough to make them.

Obviously this doesn't prevent you from breaking other rules. Actually, once you make it into the big leagues, you can now afford to break more rules than ever before.

Even more funny since fb also scraped data from email accounts by misleading to obtain logins and passwords and spammed people.