I know the timeline. She posted under "friends only" thinking that it meant "friends only" rather than "friends, and friends of everybody tagged." Is this unclear?
Ah, now I see why you continue your line of insistence here: the problem is that the person who publicized the photo wasn't supposed to be able to see it. The poster didn't know it would be seen by more people than just her friends.
Says who?