I'm a teacher in the UK. Educational systems range from the ridiculous like the one you mention to the ones who take it very seriously. One employer some time

I'm a teacher in the UK. Educational systems range from the ridiculous like the one you mention to the ones who take it very seriously. One employer some time ago would only do password reset if you turned up in person with photo ID. That organisation had quite a lot of students spread over a number of sites so it was labour intensive - the library staff used to be able to reset passwords and they had access to the student and staff badge photos. IT staff at a University I taught at for a year would only reset password if you went on a conference call with a manager level staff member who could confirm recognising your voice. For a general access Web site available nationally and not tied to an institution I imagine you would have to fall back to the usual email reset code with challenge question type systems.