Well, yeah, because they initiated the code to verify it was you who called them. Better than them asking your "security questions" or such. It's a completely different situation if you got an incoming call who asks for that.