Yup. And even if he did clear cookies, it would still be pretty trivial for Facebook to associate the accounts through other cookie-like persistence mechanisms.

Yup. And even if he did clear cookies, it would still be pretty trivial for Facebook to associate the accounts through other cookie-like persistence mechanisms. No need for fingerprinting, though they're probably doing that, too.