You can get IDless SIM cards overseas still. E.g. Colombia.

They probably don't have the infra set up (yet) to detect they are such SIM cards.

Especially considering that VR devices film your whole room constantly, I think I will never connect my Rift again.

That might be what they tell investors but I disagree that they've gotten good at policing accounts. I moderate a large Facebook group and we get flooded with join requests from obviously fake users all the time. Most of them have a handful of southeast Asia friends, some random highly geographically distributed friends in the English speaking world, and stock or stolen photos. The real giveaway is the programmatic nonsense responses they give to the membership questions. I've been reporting these accounts to Facebook a long time and they persist, often with join dates making them multiple years old.

> Using some combination of behaviour analysis, flagging new and/or cookie-less browsers, and (I suspect) human review FB have gone to great lengths to try and assure their customers that all humans have one and only one account under their true legal name and biographical details.

They're not very good at that. A pretty big chunk of people I have as friends have fake names, some of them even after me reporting their names for being fake.