It's insanely easy to change sim cards. A few times I've done it they haven't even asked for ID. I even set up a 'port out pin' that requires me to give a 6 digit pin anytime I want to change something about my service or get a new sim card, it's 50/50 whether they actually ask for it or not.

I've been migrating to a Google voice # over the past 3 years, and there are still a few places that won't send texts to it. It is a huge pain in the ass. I can't imagine the average person going through this...

I don't trust google but I also don't trust any phone carrier. Holding onto privacy is getting harder and harder it almost doesn't even feel worth it anymore.

Not in the US, but here in the UK on O2 I tried to get a new e-SIM packet and I got a text from the network saying "give this code" then a call from them asking which store I was at so I could confirm. Also had to show my ID.

Coincidentally, I heard from a T-mobile reseller that T-mobile is forcing them to reissue new SIM cards to all their customers. Unclear if this is related, but the timing is interesting. This was communicated a few weeks ago, before the breach was publicly known.