The real reason it seems unlikely is not about whether they were able to access Facebook messages (though the scope of PRISM is still unclear). It is more that it seems unlikely the NSA or other groups who may be able to get access to private messages care about German teenagers attempting to work in America. Alternative explanations (they got it from the host family, it was actually public, etc.) + vague reporting is just much more probable.