A lot of online services ask members to provide answers to questions like these in order to unlock their accounts in the event that they forget their password.
When I suggest to people that we should communicate using encryption, I get the impression they don’t take me seriously. Am I paranoid? Do I think I’m interesting enough to be the subject of surveillance?
In 2009 a list of 32 million plain text passwords was exposed for the online games service RockYou.com. So what? You probably weren't signed up to RockYou.com, so why should you care?