Microsoft has done it again. I wanted to make some changes to my Xbox Live account and was presented with a screen saying something like "In order to verify you are who you say you are, you need to enter one of the following information: alternate phone number or alternate email address." So, I enter an email address that I use for companies that I think will probably spam me and Microsoft sends me a "Microsoft account security code" that I need to enter on my Xbox Live account page in order to continue with my changes.

So, I give them an email address that I've never given in order to prove I'm who I say I am. Does that seem right to you?