Correct, there are no actual vulnerabilities in the hardware or whatever. It's that people are re-using passwords, getting phished etc.

But... based on the number of people I've seen had their Facebook account "hacked", there are going to be lots and lots of potential victims here. Enable 2fa, use a unique password for this account, and this will never happen to you.