If any company is truly truly serious about not allowing someone to maliciously change data then they should insist that you have to do it in person and show government issued documents that prove who you are.

I impersonate my travel admin challenged mate to airline companies all the time. If they were serious about security they would put paid to that. As they don't, they are not.