Not sure how nobody is talking about this which just happened a month ago.

https://localmess.github.io/

They have been running a sniffer agent on localhost so they can track you over VPN and incognito. Why are people still using Meta crap? They are a surveillance/spyware company.