Update (June 13, 2023): The vulnerability highlighted in the original article below has been resolved and it is no longer possible to break into an account using just a phone number, as far as we know ...