Basically, users are not quite fond of protecting their accounts by not using a security question, that, is the very best assurance of security you can have in forum. And most of the hacked accounts as you can see are those accounts for sell, without having escrow, if i am not mistaken.