Any new account can use Facebook for 24 hours before email verification becomes required. This is a huge issue for any email address not linked to a Facebook account. Facebook will happily leak the social graph of that address's shadow profile (e.g. in the "suggested friends" list), and let anyone impersonate it, for 24h.
It happened to me. Those 24h were no fun.