[jandrese]

The most infuriating thing is when you go to the trouble of setting up 2FA and a strong password only to discover that the helpdesk will happily turn off 2FA, change your email, and reset your password if you call them on the phone with a sob story. They won't even send a notification to the old email address telling you that it was changed.

[city41]

I once had a representative from Vanguard call me, and the first thing he asks me for is my security questions. I responded with "I can't be certain you're actually from Vanguard" and he got really annoyed. He was legit, I called them and got him on the line and we went from there, but it was obvious from the exchange most people just happily oblige their info.