The backend can. But what’s exposed to customers will be a very very small subset of that capability. Hence why only the csrs can perform that function.
The business undoubtedly did a crude cost/benefit analysis where the cost to expose and maintain that public interface vastly outstrips the cost for the few people that have to call in and change their name.