Verification Security Issue

Today I received my free streaming device from Xfinity, and it works well. Nice interface, easy to use. It asked me to enter the last 4 digits of the phone number registered to my account to verify my account. It's good to have this to ensure no one could potentially use the device on my account if it were stolen. But that security measure doesn't matter when included in the same box is a card with that exact requested information on it: my entire phone number and the account number. So while porch pirates continue to steal people's packages from their homes, had this been stolen, they would have been able to set up my device without issue and use my account fraudulently. Maybe someone should reconsider including the same information your devices ask to verify the account holder. Just a thought!!