Looks like Facebook silently introduced encryption for chats in XMPP/Jabber clients (Pidgin, Adium, etc.): Its servers now support the use of TLS as defined in RFC 3920.

Facebook’s FAQs (1, 2) have not been updated accordingly yet.