The British provider recently patched up a website issue that showed account holders' full names, but attention is being drawn to an approach that lets visitors add paid features like TV service using only an account's phone number and postcode as credentials.