Well, thankfully at least on that front, iCloud lets you set the recovery key that removes the possibility of using recovery questions.

But it still leaves this other hole that people can drive through.