What I don't understand is why the service person can see the PUK (1). There are just way too many ways this can go wrong. (1): Rhetorically, most likely beca

What I don't understand is why the service person can see the PUK (1). There are just way too many ways this can go wrong. (1): Rhetorically, most likely because when their service system was developed this wasn't a concern and since then they never re-evaluated this part for security (or did and didn't care to change it).