The biggest problem I can see is the e-mail verification, but I imagine even that sort of thing would be scriptable. It's all just squirting characters over HTTP, right?
In theory, yes, but the problem with this kind of complex scraping is that you're constantly chasing the moving goalposts of facebook's code updates, which are frequent.
