Zuckerberg says Facebook could have done more to prevent misuse