It's more about the misalignment than the poor security. The guy wanted something simple and the agent broke the law fulfilling the request. How long until somebody tells a very capable agent "make money" with no further context? Cue scamming old people, fraud, hacking.