Wait what? They exposed their own @facebook email address, not your email outside of the service... right?