Heavy restrictions on how apps use third party SDKs for signing in, forcing FB to change its policy of requiring the SDK for native apps which use FB to sign in.

And then reject new app updates which don’t follow the new rules.

Or just outright ban this spyware.

An SDK that large must have an obvious signature. Block it.

Don't allow the files to install.

Block all communications.

Ban it completely except in the Facebook authored apps.

Q. E. D.