Facebook’s security model is designed to prevent unauthorized access, even to a user’s own account if they cannot prove ownership. This is intentional.