Did you catch this? "Separately, we previously disclosed that our outside forensic experts were investigating the creation of forged cookies that could allow a

Did you catch this? "Separately, we previously disclosed that our outside forensic experts were investigating the creation of forged cookies that could allow an intruder to access users’ accounts without a password. Based on the ongoing investigation, we believe an unauthorized third party accessed our proprietary code to learn how to forge cookies." While I agree with your sentiment towards security questions, they are irrelevant when something like that is done. A bit scary.