I honestly don't get why these bots are sending PRs just for the sake of it. I don't see an economic incentive, other than maybe trying to build a rep and then hoping they can send a malicious PR down the line... any other reason?
No, we need to make this as socially radioactive as possible. We don't need to establish a permission structure to allow Facebook to continue doing this without repercussion.