Never been a member, but I do receive regular notification emails from a Fb account/person I don't know, and an account I've never had anything to do with. Yes

Never been a member, but I do receive regular notification emails from a Fb account/person I don't know, and an account I've never had anything to do with. Yesterday after news of stolen data emerges, I received a "Facebook password reset" email sent to my gmail address. I ignore all and filter as spam, but sometimes I see them. The email headers do show the source is facebook. Seems like Facebook allows new account sign up from unverified email addresses. That's a flaw in their policy against spam and abuse, making these hacking events worse when they happen. They need to use activation codes in the email used to sign up with.