[impissedoff1]

This is super trivial, a malicious actor will just use one of the thousands of free receive only sms to confirm

[ghusto]

My first thought too. Trivial for bad actors to get around, an annoyance for normal developers.