why security questions are bad?
Security questions aren't bad in theory; it's in practice that they start to come with strings attached. But this is something you can guard yourself against. If you're taking security questions seriously, make them unique and don't reuse them. Reset them if you think your account may have been compromised.