FB never built technical countermeasures, merely asked app devs to pinky-swear not to siphon user data.