I wish session would generate a new ID for every contact, like how you can generate new bitcoin address that all point to same wallet.

One fixed session ID seems only a minor improvement over a phone number. Though they do have a few other technological advantages as well.