It is much harder nowadays, but around 2000 every Hotmail account was protected only by these easy one sentence questions. It was trivial to open accounts if you wanted to. Favorite football club, pets name - - just ask the target. I remember I was young and was wondering why is it so easy to 'hack' Hotmail.

Just got an evil idea.. You can target on fb and Google by email lists. You create some stupid web app with questions and promise something in return, a prize, or make it worthwhile to play and target them with all the security questions email accounts or whatever might ask. Could be that this is being done for phising already if the victims are being targeted specifically and don't have 2fa.