I propose that we have new tags for insecurity-questions with a synonym of security-questions to be used for questions about those annoying favorite-pet or mother-maiden-name kind of questions that are an outdated and ineffective form of authentication.
If the community decides not to create the tag (e.g. there is no reason to use sec. Qs at all), we should probably redirect posts to a canonical post explaining the reasoning.
Here is an incomplete list of posts that should be tagged (or dupe-hammered):