Call in facility NOT secure.

I see that Edgars revamped their website and didn't migrate existing users across (complaint for another day). The reason for my concern is as follows: If you call the Edgars help line you get (obviously) an automated answering service. For 'security' reasons you are asked to validate yourself by typing in either your 13 digit ID number, card number or account number. This is where the problem comes in, before going further your account balance, monthly installment and available credit balances are read out to you. This is ridiculous!! Surely this should be more secure. Perhaps give the option to request a balance on once you accept you are sent an OTP to your phone and you type the pin in at the prompt. Does Edgars realize how many people's ID numbers are exposed on credit applications, CV's,job applications etc. No need to get any credit reference, anyone can just call, put in your ID number and find out how much you owe. Is this even legal? There should be a clause in the POPI act prohibiting this. I am pretty sure that by the sheer call volumes and difficulties in keeping track that anyone can call the calling number can't be traced.