I have Orange Flex. I can just install the app on a new phone, login with email, and have new eSIM issued and installed within a minute.
Password to Flex itself is in my 1password db. If that gets compromised I'd have way bigger problems than cloned phone number.