Apparently, you didn't understand my post. Your reply didn't tell me anything I didn't already know (except for the alleged cell phone fraudulent purchase). For transactions regarding account changes or purchases, the pass code MIGHT be defendable, but NOT FOR SUPPORT.
I have had a cell phone and AT&T account for 15+ years and never had to have a pass code before. So why is it mandatory now? Don't fix what ain't broken.