Not yet, but soon
Facebook, just 4 days ago,
announced a change to the login flow
. The current login flow (version 1) is what we use. Version 2, which is being rolled out, will allow even finer grain control over the permissions that a user is granting, including the friends list. We agree that that permission is a little odd as a default, but it is, and has been, the default for the last few years... so there hasn't been anything we could do about that.
We're still investigating the v2.0 API (again, just announced in the last few days), but it will definitely be implemented over the coming months. The 1.0 API, which we use, will no longer work on April 30, 2015... so there's a hard deadline on when we'll have to migrate.. but we're planning for later this summer.. just so you know.
I hope that helps answer your question. Really, you're asking something on the cutting edge of possibilities, but you can be assured that we'll support the improved permissions model soon.
If you have any questions or comments, just let me know.
Thanks,
Alex