Thanks for clearing that up. I wonder if developers actually know they are signing up for this when blindly dropping in the SDK, just to support FB login.
I’m surprised most popular apps haven’t learnt their lesson since this happened last month as well.