Reducing SMS Authentication Risk with Identity Threat Detection
A phone number is not a stable identity object. It can be ported or SIM-swapped. Phone-based authentication is still important, but mature identity threat detection should treat the phone as a context source, not a verdict.
