There is poor security around the mapping of phone numbers to physical devices.