These posts are all thoroughly reviewed by comms and legal teams. In onboarding, it’s thoroughly communicated that you need to go through the proper channels to publicly publish anything with technical details.

Those blog posts likely go through legal, privacy and marketing review.

If you think that Facebook wouldn't enforce an NDA, especially on something sensitive like this, I think you are incorrect.