Thank you for your post, @princeemanuel. I myself almost got snagged by a phisher just yesterday. Someone had made a comment on my post including a link to what they said was their post. When I clicked on it, I knew something was off--it took me to "steemil.com" (with an "l"), and the site had toggled from "night mode" (like I usually have it) to "day mode." It was also asking me to re-login. Thankfully I had the wherewithall to notcie these things and suspect it was a scam (I think I had also read somewhere earlier that day on here about someone being phished, so I was already on alert).

I like your idea about the security questions.. Makes sense to me; also seems easy enough. (On a slightly different topic, I had made the suggestion that perhaps captchas might be an effective may to "prove brain;" but this was in relation to bots and their regulation.)

Anyway, thanks for bringing up this topic--hopefully something gets done to address the situation--because you're right: People are not going to want to invest in something they don't trust!! (***Similarly, it is ULTIMATELY our responsibility to protect ourselves on Steemit. This is sort of "part and parcel" of a "decentralized" system--there is no "central authority" who is truly even responsible for the "security" of the platform; it's your's and your's and mine.