It’s crazy that there ever is/was an endpoint to read a user’s private messages. What exactly would ever be a good use case for that where a user would knowingly agree to it.
Here’s one: I used to work for a company that made social media compliance software for financial companies. Agents/brokers/salespeople had to connect their FB accounts and agree to have their PMs monitored so the compliance department their home companies could monitor what they said. This was so the companies wouldn’t fall afoul of FINRA/SEC/etc.
IIRC, we could see the agrnt’s half of the exchange only, and they were certainly informed of exactly what was going on. The software did other things, too, such as being able to post approved content on their behalf, but this was a core function. Their alternative was to not be able to use Facebook at all.
