No i dont think you should have to just like i shouldnt be forced to use social media to recover an account.  I had to do that the other day and wasn't happy about it because it wanted identifiable information.  i believe we have a right to privacy and this policy violates that.