That helps only for breaches involving specific email addresses. What the GP is hinting at is Facebook having your email address and you using the same email address on a site for a purchase. Sellers usually upload their customers' email addresses on to Facebook and other social media platforms so that they can target these users better. So if you use the same email address everywhere, then linking all your interactions and transactions is a certainty.