Would be very easy for SE to fix this IMHO. All they have to do is not allow changing password/credit card information in one session. In the off chance someone changed passwords, and was hijacking the account, just allow the idiot GM's to lock accounts based on another players reports. This may seem like it would be open up for abuse, but how many people would announce they are changing their passwords, so others would know? Or, how many people would call GM and ask an account with pw changed with some other information (i.e. how many mules, registerred name, etc). Or, give the GMs the capabilities to lock out an account based on another accounts GM call, only if information other than password was changed.
What's the worst that could happen? Someone could screw with you if they *knew* you were changing your information. Would just force you to go to customer support in the morning.
XI Wiki

