There is a huge difference between: * poor security question, which is up to the user to choose * poor account recovery policy which is Microsoft choice, is t

There is a huge difference between: * poor security question, which is up to the user to choose * poor account recovery policy which is Microsoft choice, is the same for all users and which the user cannot do anything about