Yes but they only performed the training on the posts and images set to be globally publicly accessible by anyone. In a sense, they took the public permissions as an indicator that they could use that data for more than just providing the bare social media service.