I had that exact thing with a bank last year.
Them: Can you confirm your mother's maiden name?
Me: Sure but just a second. I need to open my password manager because it's a long random string.
Them: Okay, that's good enough!
I reported that to their security and compliance team. Never heard back but moved my accounts from there.