Advertising By Committee.
It's as if you were in the banking security focus group yourself. Somebody made a "joke" about being asked for their dog's maiden name. Some people nodded. And it ended up in the creative brief.
And now it ends up on a big poster. A poster that is as amusing as the original "joke", as irrelevant as could be imagined and which tells us nothing about how this enhances the security they're advertising as a differentiator.
But that doesn't matter because when it comes to security, we all value simplicity above effectiveness. Don't we?