I think it should be illegal to require people to accept an agreement that enables facebook to sell their information to anyone. Not saying it is easy to do though. I guess that is part of what GDPR attempts to do in Europe. Intentions can be argued, but it is something.