The people Verizon/ATT are more fallible, because of the implicit risk/threat model that is imposed on us by duopolistic infrastructure.
They have vastly more power without the required training.
This asymmetry makes them larger targets, and therefore, more fallible.
ATT/Verizon employees are the weakest link in almost all threat models, including our national one.
I don't think I am personally infallible; and I am/used to be the reason you have to take cyber, social engineer, and spear attack trainings every year.
It is because I know the true weakest links (humans with unrelegated access) that compel me to remind others:
do not use SMS for 2FA.
There are other ways of getting the nonce/temporal secret to the end-user without pitting the security to a overworked 27 year old druggy CSR in upstate new york.
