> that proved that security and functionality are at odds with each other. Thus my basis for my belief that as Facebook adds functionality security will worsen is the underlying theory

You are making a huge assumption that Facebook is as secure as it can be at its level of functionality. It is easy to see that they could add a tiny bit of functionality that barely hurts security and fix the "add any of your friends to groups" bug that their security and functionality would increase.