Facebook’s planned password recovery process might make some uncomfortable, but the good news is that it won’t involve giving the social media giant access to everything