I can easily see how FB wants to throw CA under the bus and make it look like data theft while the truth FB wants to draw attention away from is that this is the system working as intended.

Or if not technically "intended" then well within the boundaries of what FB is willing to tolerate as long as it's making them money.