If by security you mean the organization that gives data to the police willy-nilly and not any sort of org dedicated to protecting user data. FB has no security (user data) ; no org, no culture, barely any tooling, and no corporate intent.
Facebook is only worth 100bn because it sells peoples' personal information.
Am I jaded? Not at all. I am a realist. Facebook is primarily a monitoring tool that monetises itself on selling people's personal information.
What does that have to do with the security that Facebook has put in place to protect this info so only they can sell it? These seem like orthogonal discussions. You're arriving at the conclusion that Facebook security sucks because it sells peoples' data. That is an illogical argument.