When you consider Facebook's target audience, it's probably okay to make people like us jump through a hoop in order to stop Grandma from being completely p0wned by typing in some JavaScript.
Yes, maybe people should know that running arbitrary JavaScript is dangerous, but they don't.
Yes, maybe people should know that running arbitrary JavaScript is dangerous, but they don't.