Yeah, as someone who doesn't get paid to do security, but does it anyway because it is their passion....
Dad is on the right side of things. Hijacking a phone connection like that is fucking HARD. I've been studying hacking since Zork.
While spelling out your email and password phonetically is a pain, its fairly secure.
To pedants: I said fairly, no one under observation from a three letter agency should use this.
I take it you've never had to log into a printer with an AD account before?
Yeah, I went out to 32 characters once. Until I needed to work on a printer.