There are also only 21 questions available for iOS account management's "Secret Questions" and a lot of them are pretty low ball questions that would be on facebook, or if you're a celeb public knowledge because you were asked about them in an interview. Still an Apple fan here but this probably needs to change, plus 2FA better with iCloud/Photostream too.
I'm guessing for lay people using the + in a gmail address as your iOS login adds an extra layer of security too though. Like if your iOS account is
[email protected] it's slightly more secure since you don't widely distribute that form of the email address and it doesn't require nerd shit like extra mailboxes or aliases.
Do you need to use the same Apple ID for messenger as everything else? That could be rough I guess
