All user associated data uses our own user ids, not facebook's ids. That includes post author ids.
Am I wrong to assume that this ability might enable de-anonymization of postings after a server compromise?
In case of a complete server breach, that would indeed allow for de-anonymization of posts.