Yep, that sounds about right
I've (unfortunately) some experience working with Experian, and their data, both consuming it and providing it, and I'd have to say that 'unhelpful' and 'beligerent' are the two most apposite words I can come up with to describe them.
It isn't in their intererest to have you in control of your own credit data, because their revenue is dependant on selling access to that data to anyone who wishes to see it.
And the only thing Experian care about is their revenue, which in it's own way is only to be expected, since they are a commercial outfit.
It most certainly isn't in their interest to have to bear responsibity for the 'security' of such information, since they are so promiscuous with it, and that's setting aside the (fortunately now waning) practice of chucking customer data around in flat text files on floppy disks. I kid you not
Force some legislation on the buggers, say I. They hold more data on individuals in the UK than an ID card database ever will and have no other motivaton to be decent, and so they aren't especially.