Should Facebook fix this security bug if it means losing a little functionality and a lot of influence?