@aviationdoctor.eth
Looks like everyone dropped the ball here.
X shouldn’t enable phone recovery by default, it’s an obsolete practice.
T-Mobile should use PINs to thwart social engineers (we’ve known about SIM swaps for years) + special procedures for public figures who are obvious targets (flag set=call escalation, added verif).