Adding to the iCloud story, I forgot my security questions and I was able to have the AppleCare agent over the phone reset it for me after talking about what apps I've purchased recently.
It should be technically impossible. If it's a matter of choice for tech support reps, it's not secure for many reasons.