Despite Cambridge Analytica and a damaging hack, Facebook’s bug bounty program offers a bright spot.