Which if you think it through means that the friends might have legal standing to sue the user of the extension.

Not to sue Facebook or the extension author and definitely not for Facebook to sue the extension author.