I like the idea of trolling people with security questions that you never actually use in a password-recovery workflow.
What is your third favorite vacation spot? Would you rather fight a horse-sized duck or 100 duck-sized horses? For how much money would you go to jail for 1 year?