Zuckerberg answered this long ago. He had a bunch of people's social security numbers because he asked for them and they gave them to him. Facebook will ask for anything they think a few people might cough up.

We're talking about the company that used 2FA numbers for advertising purposes pretty much immediately after saying they would only use them for security.