Login Security - Facebook Developers

The App Secret is used in some of the Login flows to generate access tokens and the Secret ... or native apps (such as iOS, Android or Windows desktop apps) that could be decompiled.

developers.facebook.com