Exactly. Facebook's model depends on being opaque about what is going on behind the scenes with user's data.
Most people, when asked outright, will tell you they don't want every, single little thing they post shared to the world, searchable and existing in perpetuity. Just like they'll tell you they don't want to see ads. However, when you try to explain "privacy settings" it's often not understood (my mom), or not worth the effort. It's opt-in vs. opt-out; if Facebook were opt-in, it would have created precisely zero billionaires.
Most people, when asked outright, will tell you they don't want every, single little thing they post shared to the world, searchable and existing in perpetuity. Just like they'll tell you they don't want to see ads. However, when you try to explain "privacy settings" it's often not understood (my mom), or not worth the effort. It's opt-in vs. opt-out; if Facebook were opt-in, it would have created precisely zero billionaires.