Yes, the client could be a "sim swap" victim, and in that case you would be talking to an attacker. So the identity validation can be useful in that case.