Not sure why people are angry at Facebook for this.

Cambridge Analytica was very similar—it was a third-party using an API for its intended purpose (with the user's consent) and then doing questionable things with the data, yet that did not stop the world from raking FB through the coals.

And it does not matter that CA was using FB's API and platform. In both cases there was user consent to provide the data.