Just today we received an email with a password reset request from a person who:
could not login into the customer portal because he lost/forgot the password
could not perform the password recovery procedure because his answer for the security question is some nonsense like 'blade-purge-satin-dash'
*shrug_emoji*