Totally agree. Pot and kettle.
For them to crow about privacy and security with their current abusive behavior and the rabble of 3rd party applications is rich. There needs to be a major change in the way these companies are permitted to do things, and for one "Opt In" should be the default.
The argument that they are providing a service still does not make users subject to any whim and change of policy, nor does it give them rights over users' data any more than it would permit forced, uncompensated labor simply because that is how they decide to write their terms of service.