@cube0x0 @qtc_de But then the authenticating system needs to hold your number - something which can be used to directly contact and harrass. So you get attempts to combine alert fatigue and social engineering as well as the risk of contact details leaking.