Uh, no, they haven't. YOU are responsible for visiting websites and using their services under terms and conditions you agreed to. YOU are responsible for and capable of not using sites do not agree with. You are getting a service in exchange for being tracked and shown ads. If you don't like it, delete your account, or fix your damn /etc/hosts file to block the (admittedly overwhelming) number of domains FB uses for these purposes.
I'm no fan of Fb. I deleted my account, blocked thousands of domains in my /etc/hosts file, use multiple ad-blockers, etc. etc. Fuckerberg going to prison would make me giddy. But, you don't get to have your mystical cake and eat it, too. You don't dictate how they run, or what data they collect, or how they use it. Get real, dude. Take responsibility for your actions. You agreed to what they do when you read(skipped) the terms of service/privacy policy when you signed up.