Both paths end the same way: a person owns the number and approves what each agent may do.
We send a sign-in link. No password to remember.