having a phone number linked to "secure" app isn't making it secure