> Tieing 2fa directly to the phone is much better than tieing it to a phone number, until you don't control your phone.

This is worse. (edit: i.e. easier for the attacker since they don't need physical access to your device.) You still control your phone, but the attacker takes your phone number.