I think security questions are primarily a bad idea.

As I understand it, hilariousandco is able to unlock these (though don't take my word for it) - so that should be dealt with quite quickly for legitimate cases as he's very efficient normally (for anyone wanting an account unlocked, signing a staked address will probably be enough proof to have your account back in your posession).