Zuckerberg acknowledges that complex privacy controls are a problem. But I suspect that's only true because the defaults are evil. If users didn't have to worry about being deceived, they wouldn't complain about complex controls because they'd rarely use them.
Like simplicity, defaults are hugely important in UI design. But Zuckerberg appears to be carefully avoiding the subject.