Can't help feeling that it becoming a good idea to simply dump Facebook if you want security - every time I sort out the security settings on you account Facebook publish an update and change the security settings and restore them to insecure defaults.
I recently discovered that FB had made almost all my timeline public when I always set security to friends only.
Its REALLY annoying!