(no subject)

What is the point of creating a password which is very hard to crack, when most sites now also require you to enter "security questions" in case you forget the password, and it is probably a lot easier for a hacker to guess the answers to such questions than it would be for them to guess the password?