Well, there's a lot between shooting them down for being stupid and giving them arguably insensitive defaults.

I agree it's sneaky for Facebook to do this, but how much more can they do than display an announcement of changes? Should we expect Facebook to sacrifice their business interests because people don't read their messages?
Trouble is, no system which offers any level of control and sophistication will be completely stupidity-proof. You may have locked down defaults, but if someone doesn't bother to check these settings they might end up whining about something else, like "nobody" seeing their status updates. All too many people expect others to be responsible for them, even when such an outsourcing of responsibility is nowhere being advertised as a service.
Bookmarks