What the hell are you talking about? There is no stealing. People agreed to give their data to facebook and do whatever with it. read the terms and conditions of using fb.
It's not that simple. Facebook's shifting privacy defaults are what enabled some of the deeper reach of the CA mining tactics and are arguably what gave them much more information than probably even Facebook had intended.
That's not to say that people are pretty careless about privacy management (and security), but this went well beyond what the informed public thought was happening (or possible) on FB during those years.
That's not to say that people are pretty careless about privacy management (and security), but this went well beyond what the informed public thought was happening (or possible) on FB during those years.