It sounds like passive IMSI catching is possible though - https://harrisonsand.com/posts/imsi-catcher/ at least when a phone connects to a base station.