Well, there are different threat models for different people. Those using Facebook obviously don't care about neither their own privacy nor that of any acquaintance. So they've got nothing to loss by using a VPN that supposedly protects them from giving out crédit card number data to strangers or getting sniffed on a café wifi.