If the operator is only one that checks credential, it is still huge security risk IMHO. He/she can reuse this information to imitates one of the customers he g

If the operator is only one that checks credential, it is still huge security risk IMHO. He/she can reuse this information to imitates one of the customers he got the credentials. Here, the operator forwards you to a machine and you input your phone password, so the operator does not know your whole credentials.