I thought Facebook was pulling friend suggestions out of my email contacts
Then I remembered I signed up with an anonymous email address. The contacts were long dormant work acquaintances. They must be sending these "suggestions" from 'their' contacts list- to me.
For this to happen, Facebook would have to have been given their email logging password.
I don't remember being asked for my email password and its something I'd never give out.