At one of my employers, we didn't allow the FB like button because it required trusting FB (third-party) JavaScript. But for sites that trust FB not to go rogue, you'd think they would make the Like button click-to-enable so it only impacts users that want to interact with FB.