TL;DR: Utterly, hideously wrong architecture.https://twitter.com/pwnallthethings/status/1046118990139949056 …
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
What we know from this is that every shitty piece of code in FB has privileges sufficient to create auth tokens for arbitrary users. This suggests there are countlessly many more vulns.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.