Thanks for the reply. Understand.
FYI, there is not a technical reason why an eSIM can’t be remotely provisioned over any data channel. (i.e. via another carrier’s mobile data or WiFi)
It’s quite literally nothing but files which are securely downloaded, validated, and installed into the phone’s eSIM. [essentially a “secure enclave” for the carrier(s) inside your device]
In your case it’s apparently the case that the carrier chooses NOT to do so as a matter of administrative and/or procedural policy. (As there indeed ARE significant security risks which must be mitigated)
(although that policy may be driven by the carrier’s own lack of “back office” hardware / software / procedures / training to remotely provision via means other than their own mobile RF network)