I use this facebook app now: http://i.imgur.com/Iyd43n6.png (Android) It's either a well written FB app, or a no-permissions jail around Facebook's own hybrid-app/mobile-site. GPS no longer turns on, and messaging works for me.
If you root your android device, you can install AppOps, which allows you to toggle the individual permissions on every application.
Not to hijack a thread, but: this is is why Apple's iOS is such a compelling case. They make it so easy to control access to the location/microphone/etc. in one tab: Settings -> Privacy -> Location Services
I don't know what Google is thinking, but given the current snooping climate you think they'd err on the side of the customer... but they don't.