The thing is, and I think you’re missing this, he got those wrong. After being asked for email and Nickname he provides them and the support person says “I’m unable to verify that you own the account”, that means he answered wrong, yes those might be bad questions because some random person might know them, but he didn’t.