I've gone back and forth on that with Jared. I'm alright with this approach since:

1. Legal has reviewed and approved this strategy.
2. P3P is a huge mess of XML. Crafting a comprehensive policy is time prohibitive.
3. As of one year ago, [5% of the top 10,000 web sites (Alexa) set invalid P3P headers](http://www.nikcub.com/posts/facebook-also-doesnt-honor-p3p).
4. Most importantly, P3P is dead. This policy is only interpreted by IE8.