True but it would be interesting to see some data on how many over the phone password resets big service providers do on a day to day basis. That kind of data would at least be a litmus to invalidate the current paradigm.
I would like to see some numbers on that. Is it as pervasive as it seems, or are the ones that get through just dramatic enough to set people on edge?