You could be right, DPSS.  After all, why is it necessary when I sign in (infrequently) to get a verification code to my email address and then also to my cell phone, other than to have both and email and cell phone number to sell?