Originally Posted by stephem

You seem to heavily rely on the fact that Citi/AA could have imposed technical controls to prevent you from doing what you did (like deleting prepopulated fields on forms).