Marketing should always be OPT-IN by default, but these extra steps to opt out is truly asshole design.
Oh, and on the opt-out confirmation screen, you get two options: Yes or No. The button colour for "yes" is white, and the “no” button matches the “save” button on the previous screen, so it's easy to accidentally cancel the opt-out. Double-asshole design!
On of my banking apps fails to open when I disallow connections to graph.facebook.com. Their support team has indicated that it's not their app. I have logs from various vpn-like capture apps, and my firewall. Pretty icky.
It's crazy because banks were so uptight about security (rooted phones) when it comes to tap and pay.
But they'll just throw facebook into the equation without a 2nd thought.