Last time I checked, Apple still used security questions any hacker can get answers to on Facebook.

Check again.

I recently reset a forgotten iTunes password. This required:

  - An email verification

  - An SMS verification 

  - A verification code sent to another device on the account

  - A ten-day wait

  - Another second device verification

That's 5FA authentication just to reset a password.

The days of answering personal trivia questions to reset passwords are long gone.