Is it not possible to ban pay Toll numbers in 2FA applications? Why doesn't Twilio do this by default? I would absolutely dispute the charge. Or better yet use only virtual credit cards for these services like Twilio that cannot be trusted, with fixed spending limits and monitor them closely.
