I don't what to touch mine SQ, it's fine like this,
I will send you something in your PM then tell me will that worry you (you can reply your feedback here)? I don't want the public to realise it. If they do by themselves then we can not do anything. I am feeling the same insecurity and I am pretty sure you will too.
I think security questions are primarily a bad idea.
As I understand it, hilariousandco is able to unlock these (though don't take my word for it) - so that should be dealt with quite quickly for legitimate cases as he's very efficient normally (for anyone wanting an account unlocked, signing a staked address will probably be enough proof to have your account back in your posession).
I know they will but have you considered the amount of time a member will need to wait to get their account back? It's ridiculously lengthy (from the experience of seeing others case around)