Zuckerberg has an agenda: http://gizmodo.com/former-facebook-workers-we-routinely-supp...
It seems like a norm of human nature.
> You will not collect users' content or information, or otherwise access Facebook, using automated means (such as harvesting bots, robots, spiders, or scrapers) without our prior permission.
Rate Limiting on the Graph API [1];
> Your app can make 200 calls per hour per user in aggregate.
The Graph API terms, and end-user terms are lengthy, I'm sure someone else could better answer this, but I don't believe a developer would get away with it via the API, due to the rate limit, and a raw-HTTP image scraper would not be possible due to the randomly named images Facebook assigns.
---
[0] https://www.facebook.com/legal/terms
[1] https://developers.facebook.com/docs/graph-api/advanced/rate...
https://www.theguardian.com/technology/2016/may/11/facebook-...
http://techcrunch.com/2012/06/18/facebook-scoops-up-face-com...