Mobile number as 2fa is simply the worst. You don't actually own it so can be easily hijacked... And now random website has your phone number.