[anonHash]

I agree.

If username is public, then it is not secure by obscurity. Email addresses for email account are public. So by changing login from email address to phone number we enhance security.

At the same time, we change it to a unique username instead of phone number we also enhance security.