I would really like you to elaborate on how "The password is question is stored by WordPress in plaintext on disk"?
If you're referring to the database password that is stored within wp-config.pnp, why is it even the same as the account password? Does the customer even have direct database access? If not, can you explain why the db password is the same and why it isn't a randomly generated pass?