The current standard is "Whoever receives calls to my cell phone number is effectively me". The designee of all account recovery actions.

The terrifying thing about this is that phones are almost trivially SIM cloned, surveilled, and impersonated, when they're not just owned with malware.