I think it’s both. There are an unbelievable number of people on Facebook, and there are also a TON of bots and inauthentic users. Meta has every incentive to exaggerate their numbers and permit bad actors (at least up to the point that real users are driven away). Same goes for all corporate social media.