It surprises me that they don't require both of you to have each others phone numbers in your contacts lists before giving away identifiable information.
Telegram released a new version with that exact same requirement to enable visibility. The settings in Telegram have also been expanded for this. On the other hand, this same vulnerability exists (and continues to exist) in WhatsApp and Signal.