Right?

Given those costs, you'd think they'd offer other ways to verify, like any other messaging platform, email, carrier pigeon, etc. They're just sending a code - without knowing the rest of the user info, no one else can use it.