While it's probably true that the EULA permits FB to read the contact list, and update it in expected ways, there are many points covered in those statutes: interception and destruction of data, making the system unavailable for its intended use, etc.

Can anyone find language permitting FB to destructively alter the contents in profoundly unusual ways so that email is redirected to FB servers for interception and delivery as FB deems appropriate?

I'd really like to see an informed legal opinion on the possible criminality of their actions.