Yes, but I believe there's a "feature" that allows your friends to share your photos and other content without your permission. This is separate from the "feature" that was just helpfully introduced that allows other websites to identify you or whatever the hell it was.

Seriously, I'm finding this Facebook thing more and more of a bother. It's great for connecting with old friends and keeping in touch with family, but if I have to be on edge all the time keeping an eye on the thing to make sure it doesn't breach my privacy then it's just pointless. Everything that affects privacy should be opt-in, not out. But FB can't resist the siren call of those billions of pieces of personally identifiable information they are sitting on.