Didn't Facebook had a similar bug? shit happens, at least all of their other processes are good enough to compensate for this so while there is some (substantial) information leakage it's not exploitable which is more than you can say about Facebook's many API bugs over the years.
