Hacker News Reader

This is super trivial, a malicious actor will just use one of the thousands of free receive only sms to confirm

My first thought too. Trivial for bad actors to get around, an annoyance for normal developers.