Do phone number requirements for account sign-ups effectively deter/mitigate spam?