If it was FB friends, and not the AAWA administrators who auto-added people, then it's the FB friends who deserve the blame.
I think the point is that once they realised over 1000 people had been auto-added by some people they should have shut the group and re-started with more secure settings. One of the founders has said that they even recognised known apologists names being added to the group - at that point it doesn't matter if it is secret to the public or not everyone that is in the group will be able to see everyone else in the group and they cannot be aware of everyones motives. Depending on peoples personal FB settings the group members would be able to gather infomation from the personal profiles of other group members