⭐ Merited by nullius (1)
They've already claimed that they've frozen accounts, which isn't really possible, unless they had some kind of database access, which would mean they'd be able to remove the security questions themselves if they really wanted too.
If you know/guess someone's secret question you could lock their account and change their password. No other info required besides username + secret answer
Quote
Using this feature is not recommended. Anyone who guesses your secret answer will have access to your account. It's like a second password.
I'm not giving them any sort of legitimacy in their claims of locking several accounts, but they could if they knew the answer. Facepalm moment aside, this is more of a hassle to remove than to ask users not to write anything in that field...