Now she knows that she has to check, despite the text of the feature, thanks to the FB security model.

I think we can all expect an FB permissions update in 1Q13 that touches on this experience of hers.