The only thing I can say is that in this guys case, with his speciality being computer security, he should be able to secure his privacy settings properly on facebook. More so than say somebody who is a teacher or waitress, etc.
He may very well be able to secure his Facebook page. He just chose not to. That doesn't mean that he is not a qualified security expert.