You're most likely right - but I can envision a situation where the security company's manager didn't tell their employees (or more likely, subcontractors) about what they can and cannot do.
I find that Starbucks regular coffee is okay, probably because I drown my cup with half-and-half. And as long as you stay away from the fancy drinks, it's not too bad cost-wise.