A very pointing set of thoughts. Funny that it had to come after a serious incident. In fact, in India, there is this tendency of authorities trying to escape having to educate the public. Now, I would like to share an incident. I had a credit card from a very glamorous bank in India which also provides free coffee for customers. Now, I had their card in November but even after many days had passed, I did not get their PIN number. Although I don't think I will EVER use the cash withdrawal facility provided for credit card holders, it was still a security risk since the information could have gone to a third person who could use it maliciously. Therefore, I gave a call to their customer care centre and asked for a new PIN number to be sent to the "address registered with them" (which I confirmed). But, not only was I asked my card number in voice, I was also asked my CVV number in voice. Although I gave my card number, I declined to give my CVV number since I thought it was confidential information and did not feel it necessary for the executive to identify me (Ideally, they should have a customer number and verify details against that. They should never ask the card number).
