> set of if statements in their code should be enough to check for typical suspicious circumstances.

I am not defending Facebook here but come on. There is at least some nuance you should acknowledge