How so? The carrier can issue new SIMs anyway, nothing I can help about, it's a trust or get fucked system.

Password to Flex itself is in my 1password db. If that gets compromised I'd have way bigger problems than cloned phone number.