Who says it’s their security practice… The way the top post is told, I would assume the call to be made by an attacker . :)