I've had a very similar conversation myself. Given that we're encouraged to do exactly what you suggest to protect ourselves from identity theft, it staggers me that call centres haven't figured out a way for you to be able to call them and confirm that they're who they say they are.