Please apply a little bit of critical thinking. It's a CEO's job to make the company look good. They therefore have an incentive to lie/exaggerate in a way that benefits them. They do not have that same incentive to make their company look bad.
Of course Facebook is putting effort into data security. They spend a lot of money getting everyone's data, they're not going to give it away for free.