It might be entirely right but does rather sound like they didn't look at any business logic. Simply that FB could be modelled as a virus...