I was astounded to discover that if something goes wrong while ordering online at www.tesco.com, and you phone up for assistance, the only way for operator to help is to use your username and password to login to your account.  Apparently there is no admin facility that the operative can use, they have to ask you for your username and password.  Of course you can reset your password, but how many people use the same details for more than one site?  Plenty I would venture.  Making this at best a major inconvenience and at worst a very low security standard on behalf of the largest Supermaket chain in the UK.

Their official response to me was:

Helpline staff have no access to account passwords or payment card information and without customers providing the password for their homeshopping account we are limited in what help we can offer. We could have reset the password which would allow us access but would then cause added inconvenience for yourself or your wife to change the password after the problem had been resolved.

Is this really acceptable in todays hightened security world? 

Ian