Honestly, it might well be actionable for purchasers of existing hardware. They can legitimately point towards a public statement made by a company agent authorised by his employer and that they bought the device on that basis.

The problem is that if Facebook had to pay out $20 million to make this go away they'd consider that to be entirely a cost worth paying.