Still plenty of places have "shadow security questions" based on knowing the answers to some of these things already.