You are 100% correct. I trust this guy for a couple of reasons. It is very possible to have multiple friends to work at Blizzard. Blizzard is based in 2 locations (in US) Austin, Texas and Irvine, California. My cousin works as a IGSR (in game serivce rep). So the amount of people that work for Blizzard is concentrated in these two areas. Blizzard employs alot of people. So it is very possible. And so is people wanting to sell them to him. Think about it. They spend all day helping people in WoW or creating/programming WoW. Do alot of them want to come home and play WoW when they had just spent all day on WoW? I wouldn't but thats just me.
And what has he to gain. If you lose you account to this guy, then you deserved it. But people who did get a Phase 2 Email, you see that the intrustions are going to be sent in an email and he is not going to use any type of attachments.
I trust him. And flamers, until you have proof, do not flame.