So, effectively, three security questions, like this: Favorite color? red Favorite band? yes First vehicle? car In reality, they actually reduce compl

So, effectively, three security questions, like this: Favorite color? red Favorite band? yes First vehicle? car In reality, they actually reduce complexity, defeating a 12 character password requirement with numbers, uppercase, lowercase and punctuation characters, because the total space of complexity can be possibly less than 9 case-insensitive letters.