Comment by bluesign

I don't think Facebook will do this to be honest.

But if they decide to do, I think best way of action will be some defensive programming around it, with plausible deniability.

I am guessing they are already checking binary integrity etc, also they can probably push code updates from server. So when you put this pieces together, they have everything they need technically.