A different issue - but around phone companies and security. When your contract is running low, they call you and ask you to tell you them your security inform

A different issue - but around phone companies and security. When your contract is running low, they call you and ask you to tell you them your security information as part of resigning you under new terms. To emphasise: they cold call you and claim to be from the firm (which you don't know - it might be a phishing attack), and then ask you for your security details. They socialise their customers towards being vulnerable to phishing attacks. I had this ages ago with an Australian provider (Telstra), and recently in the UK (O2). Having followed up, I know it to be O2 policy that they are happy to do this. They... defended it on commercial grounds around practicality. I'm sure that I'm not the only one to have though this is crazy. I raised an incident but as you'd expect it went nowhere. Has anyone else tried to pick it up with firms that do it? Imagine a simple piece of legislation that banned calling and asking for security information. Would there be edge-cases that would make this a bad law?