Phone number requirement was thankfully removed some time after Musk took over.
Right now you need either a phone number or an actual phone (hardware ID) plus email
Exactly. A passcode and email is significantly more privacy-forward than a phone number. A leaked passcode hash is meaningless on the internet and can't be used to triangulate you.