I checked everything and it looks as if only friends can read my stuff but I suppose anyone can still send you a message. Whatever!
The "Connecting on Facebook" page should let you control who can message you. That's not the first page that comes up when you select privacy settings, you have to go a level deeper.
