Using DDP to login with the existing accounts-facebook package would be a cleaner solution.
From searching a little just now, people have already had to deal with these issues over the last two years when integrating with Android and iOS apps.
Here are some findings:
I’m going to use your solution now, but would be nice if things were changed on Meteor’s end to make things as easy as login with password.