Huh> Link to the scam..
I'm also using these exact two things. Now getting your email compromised is totally in your hands, either you have a very weak password or someone already knows how to recover your password in ahem situations.
So keep shuffling/changing your secret questions etc.
I use...