Edit: And if it was a bug, they've taken their sweet time fixing it. I can still right click -> Save Image As.
Indeed. If Facebook is trying to lock users in, a non-patent-encumbered format with a free BSD-licensed reference implementation seems like the wrong way to do it.