This is so true!
Part of my role is to help our participants register for online access for their group retirement account.
One of the things they have to provide is a security question answer in case they forget their password and the hint for it. I can't see the security answer but I can see the question ... and many many times the hint is "pet's name".
Have you used a pet's name as your security question answer?