CA was a 3rd party developer that misused data users authorized them to use and it happened 10 years ago when FB was still essentially a startup. They’ve come a very long way.
Indeed - they've increased the scale of their atrocities against their own users quite a bit since then.