Re: Another issue with VM's password policies is...
I take it you must have been calling from a non-VM line in which case it's good to know they do ask for further verification in that case. I do now recall that several years ago when the characters I gave weren't a match - I only realised later they were checking against the original one - I was asked for the last bill date and amount.
I called them last month (to haggle the proposed price increase of 3% down to a 30% discount) and was asked to confirm that the phone I was using was the one associated with the account and then the only other check was the three password characters.