I do blame them. These questions are always the weak spot and any system is only as secure as that weakest point. Three answers to those questions are typically

I do blame them. These questions are always the weak spot and any system is only as secure as that weakest point. Three answers to those questions are typically trivial to find out. I find it downright malicious to even suggest someone protects their data or wealth by asking people what the name of their high school teacher was. This is a incredibly stupid idea and suggesting this to your users shows that they are either stupid to the point where they should be considered unemployable at any company or criminals.