Not sure how nobody is talking about this which just happened a month ago.
They have been running a sniffer agent on localhost so they can track you over VPN and incognito. Why are people still using Meta crap? They are a surveillance/spyware company.