&gt; Teaching blind compliance with any (unauthenticated) request based on &quot;security&quot;<p>This feels especially strange on the phone, when someone (who later turns out to be legitimate) opens up the conversation by insisting that I prove who I am, _when they&#x27;re the one that called me!_