So, if I understand this correctly, stripping it from all the decorative wording, it would go like this: 1) FB apps can obtain ids of one's friends 2) once having user's id you can obtain his name 3) ...and see the data that he (that user) has set to be visible to "everyone"

Personally I only find first point to be controversial, the other ones are rather obvious for anyone who uses Facebook.