The problem with Spyware.com is that its a made up term. It did not exist in the English language.
Suppose you buy Spyware.com for $1 million, hoping to make enough money via PPC to get a ROI.
Now suppose the day after you buy it, a new threat called "badware" surfaces on the internet. People panic and searches for "badware" sky rocket, while spyware is forgotten. Your million dollar investment loses its value overnight.
Face.com won't lose its value. Sure, right now its price may be a bit inflated, but its still justified.
I believe that one very important factor working in its favor is branding. A domain name is a brand, not just an address. Think of what MS did with Live.com (a very similar name). Pure branding. Live.com is now one of the most recognized brands on the internet.
So IMO, yes, 7 figures is a bit inflated. But mid to high 6 figures is very possible