I’ve figured out how to fix this Facebook bug.

Go to https://www.facebook.com/settings/?tab=notifications, and at the bottom of the page, make sure to check the box under Where you receive notifications -> Email -> Primary email address.

After that, retrieving the email via OAuth will work correctly.

Screenshot: https://github.com/supabase/auth/issues/1791#issuecomment-3406564184