But it doesn't look like Facebook's fault since the situatuation is entirely in the hands of the person who made the app.

But I see the point of this being a breach, and suing based on this does then look as the article says. :)