First of all, Facebook had to start "regulating" those apps in the early days, because they threatened to overrun the platform with spam.

Second, there's a long, long history of corporate malfeasance in un-or-under regulated spaces; you don't have to go back very far (2008 GFC).