If the FB developers think that's generally true, I'd say they are pretty incompetent. Even my parents, with just a couple dozen friends, have FB friends they have never met, let alone my teenage brother and his friends, who have hundreds of FB friends each.
This is usually not a problem, since they don't post sensitive information on their timeline, only in the chat to specific people.