Those restrictions seem intended to prevent people from creating a bunch of bot accounts that exploit the free tier. (Which is a common problem among free tiers for CI services and free online games)

I’m curious, what are some better alternative authentication methods to combat that problem than requiring a phone number?

Anything that isn't a massive privacy violation/security risk.

My phone number is none of their business.