I knew a person in Facebook who actually looks into other people's private photos. When one of my friend was supposed to chat with this guy and send her photos for traditional 'arranged' Indian marriage, this Stanford educated guy told my friend that he had already seen her profile and other pictures in Facebook. The surprise was all her pictures were private at that point!
That is not possible, even to get to a photo id you have to fill in a form with the bug ID you're investigating, which is then audited by internal security team.
