The problem is the mindset
There are people in the telco business which still believe that their networks are somehow sacred and that nobody with a bad intention can get in there. That's why some telcos will happily provide you with the username of the PPPoE session the user is using on the first invite.
Biting the hand that feeds IT
