They get hated on because :
-
they inspect packets. They terminate the TLS sessions at their servers and reencrypt to forward to the backend. This allows them to analyze the data to spot spam, optimize compression and such
-
they are used everywhere. If they go down, 30% of the internet goes with them.
Playing devil’s advocate here but there could be legitimate reasons to prevent features of an app if you don’t give the permissions.
Things like professional type apps that need geolocation to work (geofencing, photo geoloc) or because x big shot client wants to track their employees and you’re just forced to accept that unless you want to declare bankruptcy.
Definitely is a very hostile pattern though and there’s no reason for meta to do this shit…