Facebook is limited to what its privacy policy and TOU allow. If Facebook goes beyond that, the FTC, state attorneys general, and a bevy of bottom-feeding class action lawyers will sue (and win).
Anyone who doesn't understand this -- this is directed at the author of the blog post that started this thread, not the parent post -- has no business writing about privacy.