That's far from the only possibility. The ability of a site such as FB
to generate an inadvertent but effective DDoS against a smaller site in
a variety of ways is quite significant, and depending on the specifics,
failure to mitigate such damage once being made aware of it could even
open one up to penalties under regional computer crime laws... of
course, that's making a bit of a jump and some assumptions, but it is
certainly a different possibility from the one you suggest.
... JG