The people who tut-tut over the phone number requirement never articulate anything resembling a coherent threat model.
They also are quick to recommend alternatives with inferior cryptography.
Some days I just want to grab them by the shoulders and scream "SHUT THE FUCK UP YOU ARE HURTING PEOPLE" directly into their ears.