(To the random support team I just spoke with)
I appreciate your quick service when I had to call in so you could manually make the needed minor tweak.
But claiming that my call in was necessary 'for security reasons' in one breath -- while not doing anything to remotely validate my identity before executing this account impacting change -- you're very much doing it oh so wrong.