I have hundreds of fake facebook profiles, because back in ~2005 or so when my university got facebook, I realized that our email accounts received all mail going to not only [email protected] but also myaccount@*.myschool.edu. Facebook, on the other hand, only confirmed if you were allowed to register based on suffix matching(it was limited to certain schools at that time), but otherwise treated your full email address as your ID. If bug bounties existed back then I would have certainly turned it in, but instead I just used it as a tool to entertain friends by posting comments as other people. Most of those accounts are based on memes from back then, or minor celebrity musicians myself and my friends were in to, but to this day, every account I try still works.