At this point anyone handling passwords must have encountered enough of us to know that some family names need to be looked up in a password manager, and it isn’t that suspicious. Isn’t that right, my cousin? I can never remember how to spell grandma 38!;&,90-@3!;8,’s name.

I don't remember where now, but I have run into sites that disallow numbers and non-alpha characters in the "secret" question answers. They were actively trying to thwart people from entering random gibberish there. Of course that's silly, but so is thinking that a person's maiden name is some kind of secret, or that people will be able to reliably remember things like "the title of their favorite book."

My uncle is called Robert'); DROP TABLE Students;--

Duhangit Bobby