Simple explanation that likely explains the security panel's reasoning behind their statements.
Also explains why a phone number as an identity token is a horrible idea.