Facebook exposes 'god mode' token that could siphon data

Very silly. The author doesn’t understand chrome extension host permissions. You could write this article about literally every site in existence.

Here’s another way the extension could scrape your Facebook data, your gmail inbox, your Twitter info, etc: just request the homepage. This has nothing to do with Facebook