Services that assume phone numbers are some kind of stable ID are infuriating. Recently I wanted to log in to AirBnB. I hadn't signed in in 3 years. I was welc

Services that assume phone numbers are some kind of stable ID are infuriating. Recently I wanted to log in to AirBnB. I hadn't signed in in 3 years. I was welcomed with a nice "We don't recognize this device. Get a code by text message or phone call at <number at my previous country of residence>." The thing is, I use social login on AirBnB! Specifically because I want to delegate MFA to a service where I'll keep my profile and login information up to date. I don't remember agreeing to my phone number being used as a second factor or as a way to recover my account. So I contacted their customer service and they unlocked my account within 2 days, without any further verification.