It's not just a matter of how effective they are…one must consider the risk of these answers being included in a security breach's data dump. It's easy to imagi

It's not just a matter of how effective they are…one must consider the risk of these answers being included in a security breach's data dump. It's easy to imagine a sort of "dark web data broker" that has aggregated any "found" answers, keyed by each user's e-mail address. It would be extremely valuable to anyone trying to steal an identity. That's why I lie whenever I see them, and I keep track of the lies in my password manager's notes, which are regularly printed and stored off-site for disaster recovery purposes.