How do you keep Facebook easy to use without being trivial to exploit? The company is trying to chart a middle ground.