Why questions like “What is your mother’s maiden name?” and “What did you do last summer?” don’t protect you.