Facebook was pretty good about not letting me in, since it recognized that I was in the US, away from the usual country of Brazil. Since it asked for the owner's birthday, I just looked it up on the 10 or so other accounts with the same name, and got in without a problem.

"If it's true then the hackers are only partially at fault. (You leave your car door unlocked with the keys inside and it gets stolen kind of thing)"
I blatantly disagree with this. My dad used to constantly tell me how back in his day people left their doors unlocked and never had to worry about thieves. Whereas today everyone locks everything (myself included). Just because thieves are a banality, commonplace, in today's society, doesn't mean they are any less to blame when they go for a car that is unlocked. The blame is exactly the same whether the car was locked or unlocked, not 'partially'. And so it should be with the hackers as well.

Have to disagree, knowing how dumb people are these days. Send a link to visit a site, get your IP from visiting that, use it to remote in if possible, or just drop the internet connection with a DOS. If you can remote in, view saved passwords in Firefox, get e-mail/bank/everything, etc.