Hurrr de durr, it's, uh, a bug, not a feature:
Facebook didn't mean to send spam texts to two-factor authentication users – TechCrunch
I really wish someone would explain how something like that happened accidentally, in such a way that the "bug" was rolled out without anyone noticing that.
Also, I don't think I saw anything about this on here either:
Facebook is pushing its data-tracking Onavo VPN within its main mobile app | TechCrunch
Or the new EU privacy lawsuits they got going on (which, Americans need to watch these, because they're doing the same thing here, but we're just not allowed to complain about it):
Facebook’s tracking of non-users ruled illegal again – TechCrunch
Also note that this lawsuit only addresses the techniques for datamining, not the datamining itself. They'll keep doing that either way.