claus - 5:15 pm on Jul 6, 2010 (gmt 0) [edited by: claus at 5:30 pm (utc) on Jul 6, 2010]
Well if you aren't on Facebook you can't be "tagged" other than in plain text.
Plain text would most likely be my name. If FB enables photo albums to be searched, I will pop up in Google Image search and the rest. However, this isn't about me, as such. Most people aren't named John Smith.
I am not a underground mob boss
Think deeper. If a person knows who your friends are, knows your name and perhaps other types of personal information... and they also have a photo of you, the possibilities for "social engineering" (fraud) are simply huge.
Meaning, somebody else can pose as you and conduct legally binding actions in your name. Even crimes.
ADDED: Consider the fact that over 1 million external sites are already hooked up on Facebook by means of some kind of API data exchange, and that the FB TOS explicitly states that your data can and will be shared with external companies.
So, Facebook isn't even just Facebook.com.
[edited by: claus at 5:30 pm (utc) on Jul 6, 2010]