They can start by removing the atrocious phone number verification first.
Being forced to give them one of my 'most unique identifiers' (my phone number) was an absolute 'no'.