That there is quite scary! May have to investigate "NoScript" a bit more closely...
It does automatically what I'd been manually doing with Adblock i.e. block loading resources from facebook when not actually on facebook.com, and a whole lot more. Useful tool.