In this case the article lays out pretty clearly why the issue is with the companies and not with Facebook. More or less all of the leaks come from things that the product teams responsible should have probably known better, and one comes from a distinct design choice by TaxAct that frankly looks really bad for them.