It's a defence mechanism against account hijacking if someone has access to your phone number, linked to your account. Went through the same procedure to recover an account I haven't been using for a few years.