Go to https://www.facebook.com/me/friends, click on the pencil icon, select edit privacy.

Yes, it makes zero sense that this is the only privacy setting outside of the whole privacy tab in the account settings.

There are several things that aren't part of the privacy tab as I recall - the privacy settings for group membership and various other profile information are elsewehre thoo.