Facebook used to allow third party apps (e.g. Snaptu started as a third-party app before the acquisition) and exposed most of the functionality via their API, but it's not really a thing any more after Cambridge Analytica - the API was locked down significantly. You can't really have it both ways... Allowing third-party apps also allows those apps to scrape and store user info, which is what Cambridge Analytica did.