I expect it's mostly uncontentious stuff:

- Don't give access to other third party apps (don't act as a proxy)

- Manage spam

- Don't overload or reverse engineer [their] systems with the keys you're given

- Take care of adapting to API changes and doing upgrades in a timely manner

- Treat messages from Meta with a reciprocal amount of diligence

Of course they might have nefarious language in there, but I would think they'd think twice before doing that for a product meant to appease regulators.

I wouldn't trust them not trying something; the full NDA should also be made available to the EC to ensure they aren't secretly pulling an Apple, or worse.

The nature of an NDA does not lend itself to being published. That said, I don't trust them either, but I also know they're not stupid.