They are careful about privacy when you are careful of your own. There are millions of users who do not change the default settings.
I'd slightly modify that: FB is careful about privacy law, but its business model is about extracting private data.
One example: The NYTimes will sell your name + home address to other advertisers to send you mail. FB does not share your personal information with anyone, it just lets people serve ads to you on the platform based on it.
Do there exist 50 companies their size for that number to make sense?