My favorite are banks that require you to use their security questions which are along the lines of "What city were you born in?"

The average user probably trusts their bank, and assumes that their bank is doing everything to protect them, and unknowingly compromise themselves by putting in correct answers to trivial questions.