But this is another ballgame. What they've done here is effectively hijack a completely unrelated and ubiquitous communication channel — without any action on my part, and without giving any indication of doing so!
I don't even use Facebook, but since I created a Facebook account at some point in the past, they potentially have access to my inbound email traffic. That's just absurd and stupid.