The writing was on the wall when they got acquired, forced two-factor auth with SMS only and forcibly locked me out of my account by turning it on when I didn't have a phone setup. If you want to use SMS as spam prevention, then just do that. Breaking your product and forcing bad security to harvest numbers is, well, just shitty.