Facebook's historically more relaxed approach to privacy means it will be tough to investigate apps and leaves it vulnerable to further data breaches following the Cambridge Analytica debacle.