after reading through this thread, i find some very concerning things. The use of the word nontrivial is one thing. Calling something nontrivial does not mean you have expertise, there are a number of analytic tools that are being called non trivial or too complex, and that means it is non trivial to the caller. The rest of us who use these techniques as often as breathing find them trivial to say the least.
The lack of knowldege regarding just how extensively big data reaches into our platform is another. lets look at google, the practice of asking permission for something mundane like sorting pictures according to location can be accomplished by scraping exif data, but google uses this for an opportunity to turn on location tracking in the background. Facebook most definately does not refrain from background permission jacking.
The tools and API's laying around in the open for any one to take advantage of is another. win10 telemetry provides an intimate snapshot of a win10 instance, and any one can use that telemetry to fingerprint your hardware. Even encrypted telemetry is a highly individual number that doesnt need to be decrypted to indicate an individual machine across the internet.
The title of this forum "hackernews" is concerning, there seem to be no hackers here at all. All of the "non trivial" actions here are non trivial to those that know very little about CS in general, or have an extremely antiquated perspective on the nature and extent of system penetration as it stands today. A "normie" is not likely to know anything about lockpicking, but even an apprentice locksmith finds it extremely trivial, its just a matter of perfecting dexterity over a couple of months to be quick and slick about it.
Facebook is one of the biggest threats to national security we have in our back yard, and the lackadaisical attitudes displayed here regarding security, only set that threat in stone and perpetuity.