This doesn't seem much like bullying. If you support third-party logins, one of them must be Apple's. And yeah, requiring two-factor auth in addition to that seems broken.
I mean, yeah, it's extra work for you as a developer, but as a user, I only want to use login with Apple, and if you ask for my phone number in addition, it's a delete for you.