So does this mean every web site and app will no longer demand a mobile phone number for "security" or "verification" purposes?

(usually verifying that data brokers can identify you by phone number, and that you can be sent SMS spam with impunity)