Why bother to sue when you can use the UDRP which is a lot cheaper (about $1,500 per claim and can include multiple domains) and it's a lot quicker too (takes about a month from start to finish)?
By having access to the personal data Facebook can just threaten people with a lawsuit which in some cases will be scary enough for the registrant to hand over the domain. All this at zero cost to Facebook.
And the examples given by Tucows show that Facebook is probably automating these requests and that legitimate domains could be impacted by this
Biting the hand that feeds IT
