Zuckerberg should have protected the data no question, but how about blaming Cambridge Analytica? They stole the data in the first place and/or used it for purposes other than what they claimed. Thankfully (at least) 2 state prosecutors are looking into them...