Also, access to your phone (or rather anything send to your phone number) is trivial to get via social engineering the telco.

(The attack is not very scalable, but easy enough to pull off against individual targets.)