Please, hack my account

And your argument only works if someone is stupid enough to give out their username and password. Would it be the same if someone just knew the username but the account password was sufficiently strong?

This is a key point I think. Most of the account hacks in the past few months did not involve email hacks or changed passwords or PINs, so the assumption is that hackers can (or could) obtain IDs, hashed passwords and PINs from the database, and hacked those accounts that had passwords simple enough to be cracked from the hash. For accounts with strong passwords, it may not matter much whether the PIC is better than PIN or not. What does matter is whether or not hackers can obtain email and birthday and can they access the email.
So the questions I would really like to see definitive answers for from the 'white hats' are these:
1-Can you obtain the registered email just from account ID (or even In-game-name)? (ie, without password)
2-Can you get the date-of birth? (again, without password, and assuming fake birthday not obtainable via google research)
3-Are hotmail accounts and other free email domains really as easy to hack into as many say? (assuming decent password, and not used for any other purpose but for registering the MS account)