am I crazy or could they not just include a uri to the facebook app with the 2 factor auth token included as an argument?
Typical tradeoff: It's a nice feature, but adding it requires permissions that are off-putting to some users. I'm not sure there is a good solution here.
But perhaps if it were implemented better it might make some sense.