The subscriber <-> circuit <-> address mapping seems like it would be pretty essential to most of AT&T's field operations. I would expect better controls again

The subscriber <-> circuit <-> address mapping seems like it would be pretty essential to most of AT&T's field operations. I would expect better controls against wiretapping, reading texts, accessing smartphone location data, etc. but identifying which physical circuit is serving a customer (and, consequently, where that customer lives) would seem to be a pretty basic bread-and-butter operation for AT&T. Not really a place where you could afford to go through a bunch of paperwork or an approval process.