This is why I'm always reluctant to sign up for 2FA, opting instead for long randomly-generated passwords and a password manager when I care about an account. Google/FB having my phone number is way worse than someone hacking my crappy FB profile or spam-catching Gmail account.