I can see large amounts of exploits and scams being a thing these days.

I'm not sure that that's even worth considering, seeing as Facebook just lets scammers pay to list ads that are disguised (by Facebook) as actual posts.