Understandable for a startup, but once the company has been owned by Google for years they should have migrated to Google's OAuth by now right? Seems inexcusable for Google to leak user data to another company. Buying a Google product you would expect some data to be collected by Google, but definitely not Facebook.