Seems too much like security through obscurity? If their customer service is bad, it may also be untested -- e.g. the company may have not even thought of havin

Seems too much like security through obscurity? If their customer service is bad, it may also be untested -- e.g. the company may have not even thought of having policies and training that mitigate social engineering.