Yes, but those things need to have procedures and employee authentication. If someone employee is found to be accepting bribes for SIM swaps then it should be fired on the spot and hold legally liable for all the damages - you can easily add this into a work contract. If a carrier doesn’t do this and doesn’t log those kinds operations then it’s just poor management and people shouldn’t buy services from it.