Doesn't this kinda make many (flawed but still in use) "security measures" incredibly vulnerable to social engineering? That's all the birth dates and phone num

Doesn't this kinda make many (flawed but still in use) "security measures" incredibly vulnerable to social engineering? That's all the birth dates and phone numbers. That's crazy!