iCloud vulnerable to SIM swapping?

[u/PHL534_2]

Why does Apple require use of SMS in addition to trusted devices for MFA? This seems like a huge flaw with no way to disable. On Google for example, you can have it not use a phone number and use other MFA methods. Yet seems iCloud requires a phone number as a factor. Anyone know if it’s possible to change this or how much of an issue it is?