I doubt there's a legal issue here, just grubby, low-brow behaviour, which is basically par for the course for Facebook.
I'm not a lawyer, but I do spend a significant amount of time working with data protection and privacy issues in the UK. With my current understanding, I don't see how that could even possibly be permitted under the data protection and privacy laws here without the consent of those whose data you're transferring to Google+.
I suspect Google could get into trouble with the ICO (what, again?) if they are behind the plug-in, but if I were them, I'd be more worried about the European level privacy hawks. Here in the UK we're relatively forgiving, but Europe can and does slap down megacorps with significant penalties from time to time.