I'm not sure I'm in agreement with either piece of advice above. A typical, possibly automated, phishing/identity theft strategy is to compromise one account and then use that account to attempt to trick other people into revealing personal information. In this scenario, Nefarious Fraudster hacks into ExGF's account and immediately parses all ExGF's Facebook date to acquire details of all possible further targets. Immediately sends friend requests to everyone in order to extract information from their Info pages, once the friend request is accepted.
Given that many people have extremely insecure passwords, this kind of strategy is all too common.
Alternatively, maybe ExGF was drunk and hopeful.