[mrjin]

The answer is plain and simple: they want your phone number, your account security is not much of their concern.