Comment by true_religion

This is not a security breech or bug, it is the intentional design of Facebook. It is like complaining that if you give away your password, someone can login as you, thus Facebook ought to iasue two factor auth dongles. That is not the sort of thing to forward to facebooks abuse department. It requires a policy change for a different authentication method, and that is something that can be freely and publically discussed.