Someone could call tech support and pretend to own this phone 💀

Depends on the threat model, but phone manufacturers, mobile carriers, law enforcement, enterprise MDM systems, and some resellers or repair centers can link a phone's serial number to its IMEI or personal identification via internal records, network activation, legal processes, and device management.