Supporting ActivityPub can be done in a million ways and Facebook will likely do it in a way where they keep control of users. If you think they won't, mention something they have done where users remain in control of... anything?