You have a point there, as long as you define a challenge as teaching someone to remember their own password. Or maybe explaining to people that they should put

You have a point there, as long as you define a challenge as teaching someone to remember their own password. Or maybe explaining to people that they should put a customer's ID into the ID field (as opposed to the surname, address or date of birth fields). Or is the challenge explaining to the same people the exact same things for the 20th time, without screaming maniacally?