are wide open to the world. No wonder they are getting hacked.

Here's something I shared with my FB friends for tightening up security:

For all my Facebook friends - can I suggest that you review your security settings. For example, for your personal posts - esp any pictures of you or your family/friends - I would suggest making the default setting to publish only to your 'Friends'. If the post is Public to the world then anyone can come along, copy your pictures, and then create fake accounts in your or some other name.
Here is a link for tightening the security of your FB account:
https://www.facebook.com/help/443357099140264