I can not decide where I lay on this issue.

On one hand I love the ability to interact with facebook through apps such as Tweekdeck (which I can only assume uses this API?).

However, this API can be abused by sites to publish 'closed' information. If I create a strictly private profile so that all my status updates are displayed only to my confidants, I have an expectation of privacy. Say Bob is friends with me, however uses this API to publish all my assumedly private status updates to the world on his website www.watch-woodsiers-status-updates.com, without my knowing. Is that right?