Facebook's elaborate privacy policy is generating controversy. Is the backlash justified?