[onli]

There is a screenshot in the article of the appeal, confirming 1 and 2. Three follows logically.

[loeg]

No, this doesn't show (2). It shows that Distrowatch specifically was considered malware -- not Linux in general.

https://news.ycombinator.com/item?id=42847474

[notfed]

To be fair, the screenshots are data points, but more would be needed to support the generalization being made.

[nwienert]

Confirms that one time, one moderator labeled it that, not that "Facebook decided" it.