So ITP does nothing to protect a user who visits facebook.com every day. Which is most of Facebook's user-base.