If you have a Pandora account, and have a Facebook account, or have logged into Pandora on a computer that's logged into someone's Facebook account, go check your profile settings.
If you have a Pandora account, the profile is public, and your Pandora name is not the same as your Facebook name and you need to keep them separate, go now.
Facebook integration with websites allows the website to pull publicly accessible information from your Facebook profile, such as the profile picture, your friends, and things you have "liked".
On most websites, this is used to show you things that your friends have liked, along with their pictures in case you know their picture faster than you know their name. Crucially, this is shown to you, and perhaps to their ad server and statistics people. Most services asking for a stronger connection to Facebook will ask you first, and tell you what they're going to put where.
On Pandora, they added a new setting: "Allow Pandora to import my profile photo, music favorites, and friends list from Facebook." This setting was automatically turned on.
The profile photo imported from Facebook is prominently displayed on the Pandora user profile. If a person has a different Facebook name from their Pandora name, this can be used to link the two profiles. If a person has reason to not connect the two services, they are now at risk.
[Edit: It does not matter if you never ticked a box on Pandora to connect you to Facebook. They created the box already ticked, and it does not use the familiar Facebook "please connect me" dialog. It looks at your cookies or some such. Based on that, it then accesses public information from the logged in Facebook account to show on the Pandora profile.]
I am sitting here breathing slowly, and I feel a high-blood-pressure headache forming. I really don't have words to express the depth of my emotion that can also be said in polite society. I am strongly considering writing up a stiffly worded letter of complaint, taking BART across the Bay, and hand-delivering it. Why write a letter when I am thinking of marching in to the office? Well, for one, a letter is less ephemeral than a person in one's lobby, as a person will eventually leave, and for two, a person in one's lobby is more likely to be asked to leave prematurely if that person is screaming obscenities, and I would really rather be taken seriously.
Facebook has now lost its privileges of running in any non-isolated browser on my machines, and it should have lost them three years ago. EA should feel happy, because I had to think twice about deleting my Facebook account because I've been playing games, and once I thought twice I did remember that I do have friends on Facebook who I still like to keep in contact with.