Oh by the way they refuse to pay bug bounties to researchers who find legitimate bugs and responsibly report them.
I've been denied multiple bounties for legitimate issues regarding Facebook that they ended up patching, but was always given an elaborate excuse as to why they wouldn't pay the...