Good. I didn't agree for NYU to have my Facebook data and for them to operate a plugin at scale which crawls my data (if anyone with permissions to see my profile installs this plugin) is a violation of my rights.
The wrongness doesn't change just because in this particular case the framing is "poor researcher vs evil Facebook"