In your article, you also mentioned the facebook-app needing tons of permissions; Normally you wouldn't be able to deny an app these permissions (the alternative would be not installing the app), however there is a Xposed module called XPrivacy what's able to do exactly this. This way you can still install facebook while not giving it access to your contacts/location/microphone/etc. Sadly it doesn't work wit ART (So no Lollipop support).

http://repo.xposed.info/module/biz.bokhorst.xprivacy