You know, you can see articles where people report social engineering attacks on Amazon customer service and extract a great deal of information from them.
Having a human involved is not necessarily a solution, can be another attack vector.
It's a great counterpoint because with a large staff you can never solve the human element. It's also corollary to the hacking approaches we see regularly employed: Send an exploit payload via email to everyone in the company and somebody is bound to open it. In fact in the security space they've moved away from even saying you can protect the front door and are more focused on detection and correction once an intrusion occurs.
Having a human involved is not necessarily a solution, can be another attack vector.