Phone numbers are suitable for one-time verification, secondary confirmation, and risk notifications, but not as a long-term identity anchor.