I don't understand how Gmail allows it. I assume they've gotten enough complaints about it being abused to prohibit or strictly limit access with at least warnings before actions can be taken.
I tried searching Google for "has facebook ever asked for email account logins and passwords?" and couldn't find any proof. Does anyone have a source for this?