Facebook’s four-point defense just about holds up