I blame them for collecting the phone numbers. They can already make sure you're running an apple account on real hardware. If they didn't collect phone numbers, they couldn't give them away, that's how all good privacy respecting companies like Signal operate.