and then they lock it in harder by using it for 2-or-more-factor authentication

apple has dark patterns for this, trying to get your phone number into their system. You have to do something like "other options" then "don't upgrade security" or something.