Plenty of places also use mother's maiden name as a password/secret too.

DBA at my previous job wanted to use SSN as a primary key. I felt like I’m talking to a child trying to convince him not to do that.

Which is dumb.