They are long-term identifiers that are repeated across services so leaks are detrimental and it's easy to spam them.

Not even mentioning the terrible security of the cellular network (ss7) and terrible carrier security (sim swapping). It's caused probably hundreds of millions in crypto losses and billions in fraud.