Comment by jasonlfunk

It's still a little unclear to me what Facebook did wrong here. (Besides suspending the whistleblowers account, which seems like a dumb move.)

Is it that they collect too much data? We've known that they been doing that for years.

Is it that they allow apps to read not only your data but your friends data? That's not a surprise either.

So some company somewhere figured out a way to abuse these already known parts of Facebook in a way that already violates the their ToS.

What should/could they have reasonably done differently that didn't require changing their entire business model?