Your argument is that anyone can call in and give a name and phone number and have access to the account.
I guess it's possible, but I would question a couple things:
Sure, if I call to change progamming or something a phone number and name probably does it. I could probably upgrade my neighbor to Premier to piss him off, I guess it's possible. The question here would be motive: why would someone want to?
Surely a CSR isn't going to give sensitive information. They won't give a credit card or SSN to a customer via phone. In fact, I doubt they can even see a whole credit card or SSN. They are probably encrypted from the CSR level and only show the last 4 or something.
While I suppose it is possible for anyone to 'access an account', the power is limited, change or cancel programming, add a receiver maybe, that's about it. Hardly creates identity theft. Impact would be limited to a Directv account.
Back to stonecold, if he types a phone number into the CSR system, looks at the account status and gives feedback to the member, no big deal. And again, all he is getting is a name and phone number.
I suppose his power is no different that the questionable situation raised above from Hemi, where anyone can call in and make changes. Stonecolds power would be limited to a DirecTV account, hardly creates identity theft.