I believe it's from phishing where users give challenge codes to AI generated impersonators

Since the SMS code goes to the device with the SIM for that number, they can just ping it directly and remove human error from the loop and ensure the device being authenticated belongs to the user.

... Until your carrier gets social engineered and you get SIM swapped