It also sounds like access to certain APIs was much more limited than the NYT article implied:

> When you hear things like read/write access that access was only granted when the user gave permission. For example, if you share a Netflix link to messenger, the post is coming from Netflix.

> If you're sharing using messenger, you're able to search who you're sharing with through Netflix. If you then delete the message within Netflix, it would delete on Facebook. Very similar to using Tweetdeck for Twitter - same permissions

It's not a matter of whether I trust them. It's a matter of whether any misuse of data actually occurred, or whether this is a lot of innuendo with no evidence that any harm was, or even could be, done.