While that is correct, and I would also personally prefer that we continued to use e-mail based authentication for other reasons, Facebook does have measures in place now that make it more difficult to create loads of fake accounts.

Specifically, they now require a phone number to create an account. Getting a new phone number is more difficult than creating an e-mail address, so this will prevent at least some of the fakes.