That's crazy! The right thing would be to add a lookup function to first verify the phone number is in use and then call the number to ask for permission to us

That's crazy! The right thing would be to add a lookup function to first verify the phone number is in use and then call the number to ask for permission to use it; followed by a webhook to send a confirmation back to the database to cache that info because this needs to be efficient! /s