Facebook has a responsibility to protect user data they have collected, and if they can't then they shouldn't.