True in theory but Facebook is one big GDPR breach and nobody with the power to fine them seems to give a shit...