Option 4 should be more like assume any interaction you have with Facebook (be it through what you post or clicking like buttons or what sites you login to using Facebook Connect) is public knowledge. If you don't want something to get out on the internet, don't put it there in the first place. Even private emails between people get out when one party decides to forward it to someone else.
