Facebook pretends this is the case, but they use some dirty tricks to require personal information without explicitly requiring it.

In particular, if you create an account without a phone number, you'll find that within a day or two your account will inevitably be flagged for "suspicious" behavior, and you'll be required to enable two-factor-authentication with a valid phone number. (I assume the "suspicious" behavior here is your account existing without a phone number.)