The writing was on the wall when they got acquired, forced two-factor auth with SMS only and forcibly locked me out of my account by turning it on when I didn't have a phone setup. If you want to use SMS as spam prevention, then just do that. Breaking your product and forcing bad security to harvest numbers is, well, just shitty.
You know, I think this is correct. I was using them to do some Email workflow stuff with Pipedream, and ended up replacing it with my own Gmail SMTP since I'm just emailing myself and it's low volume. Apologies for getting that mixed up.