I guess NYPD's way around people that don't make their profiles fully public.
It would be interesting if Facebook is willing to punish/ban/etc not just the companies directly doing this, but their clients as well.
I don't accept a friend request unless I actually know the person. Do people randomly accept these requests knowing nothing about the other person than what is on their profile?
It isn't just the NYPD that does this, it's advertisers, data mining companies, financial institutions, employers, nation-states, ex's, stalkers, etc.
It's cheap and easy to do, so why wouldn't organizations mine that data that have the resources to do so?
Yes, most people don't have a million friends on social media and will take what they can get, and the age-old honeypot tactic will never not work. If an attractive person shows interest in someone, they'll probably take it.
The best thing you can do is to delete your profiles on these services.
I urge a visit to the Stasi museum in Berlin.