Never understood those kind of "security" questions. Is the site really going to hand out access to my account if that question gets answered correctly?

Also, some sites don't allow you to not set up one, so it's like forcing users to open up a new vector to be hacked.