[praptak]

"like passwords" probably comes from the journalist and doesn't actually mean that anyone has access to passwords.

[adwww]

Passwords wouldn't be the most sensitive data Facebook holds for most people - private photos sent via Messenger are probably way more sensitive.