[theplatman]

have always wondered about this especially post Cambridge Analytica where Meta imposed really stringent requirements for API use even for personal things while it was blatantly obvious that internally it was a different story

[KaiserPro]

But thats the thing internally it wasn't. The user dat controls were really quite good.

Its not a mistake that this data got into contractor hands, it was a decision that took lots of time, numerous legal reviews and signoff from Zuck himself.