CS can validate without knowing the details, the same way you don't enter a password and then check to see if that matches the password in the system.

The fact that they keep blaming overseas customer support is pure blame shifting - you still hired someone and gave them access to all this data, Coinbase!