I think he meant the friend called her pretending to be from FB, as a in phone prank.

Nope, her account got temporarily disabled within a short time of her posting that comment, got unlocked after a day or two (I'm not sure how long it took to become available). Sure, some friend could theoretically have found a way to get into her account, done the locking and unlocking but seems pretty far fetched.

There's almost always been some form of 'flag'/'report as inappropriate' button.