Aha! I'm an idiot; I thought this referred to social engineering of the person who owns the handset/SIM, not phone company staff.

That makes a lot more sense. Thanks!