> are done in a cryptographically secure fashion is not entirely comforting.

It's not even cryptographically secure, a phone number is like a 10 digit number that isn't even completely random because of area codes, trivially brute-forceable.