Yeah, this seems like punishing FB for being too honest. There was no technical reason to disclose the bug. I mean if they just quietly deleted the data that they didn't mean to collect, it doesn't seem likely that anyone would even notice.