I have multiple accounts, which I all transferred to microsoft accounts. They all got this message and had to be unlocked using a phone number. I wouldn't be surprised if they are straight up doing this to get phone numbers.
I got this message as well on an account I only use to play forza horizon. It’s obviously not some kind of fraud detection and just a way to extract everyone’s phone number.