Seems like its one of those things that's technically illegal, but is unlikely to draw any actual legal action unless done in the service of some more serious offense.
(plus, I'm pretty sure fraud requires an intent to deceive. Given that the woman told a journalist what she was up to, it seems it would be hard to prove that she was trying to make people think she was actually the owner of the facebook account.)
If Alice were to go after Bob for logging in with credentials to an account she created, things seem pretty simple. But it seems difficult for Facebook to determine whether Alice and Bob are ok with a shared account or not. And even more so for the government to determine if it's ok for Bob to use those credentials.
> "You will not share your password (or in the case of developers, your secret key), let anyone else access your account, or do anything else that might jeopardize the security of your account."
Anyway if you're not lucky enough to have friends and customers physically nearby, social media could be your only connection to close friends or critical business contacts. Messing with that could really make someone's life difficult.
The CFAA is terrifyingly broad, and this isn't even a tenuous application of it. Accessing and using someone else's account without their knowledge or permission is a clear violation regardless of who they are or what you do.
Posting "I forgot to log out!" on someone else's account is probably a criminal offense. Posting a picture injurious to their career and reputation clearly violates multiple sections of the CFAA.
Prosecutorial discretion is the only thing rescuing this situation; literally any internet operation on an account that isn't yours is arguably a criminal violation.
If someone gave me access then I'm allowed but am I committing fraud?
I agree that a suit or damages would be unlikely, but that's only at the discretion of judges; the basic CFAA violation here is unambiguous.