>Obviously, there must also be no way for any person to social engineer an Apple Care representative over the phone to get DEP lifted from a device, and this is why Apple Care can't do that, period.

That's not obvious to me. Those same people can be social engineered into giving someone access to your data, which is an order of magnitude worse than a device wrongfully moving accounts.