Trusting Facebook to monitor itself is like putting the fox in charge of the henhouse.
To claim they protect privacy belies the fact that
sharing information is at the heart of their business model, especially for their paying advertisers (who obviously don't get much scrutiny, so long as their check clears). They can try to blame this on third parties, or a "failure to follow rules", but it won't change the fact that they do a crappy job of screening their actual profit-providers. Apparently anyone can claim they're doing "academic research" and Facebook looks the other way, until they get caught for enabling bad actors, thanks to whistle-blowers or investigative journalists.