The presence of privacy “controls” isn’t very reassuring, even if Facebook were the most trustworthy organization in existence. Software has bugs. They can’t really prove that their closed implementation actually works in every case that it should (or more important, that their “controls” will continue to work after years of developer turnover, technical debt, etc.).