I think this should open up a rather more sinister debate though.

My understanding is that your banking passwords should not be wholly visible to any employee of the bank - if I ever have to use my password like this, I am asked for something like the '1st and 6th letters' of my password, which are in theory the only letters revealed to the person I am speaking to. Surely that fact that someone has seen your password AND has the facility to change it is a serious security breach?