Maybe you could shed some light. The landing page says No username, no password, no recovery phrase to backup. Just use your phone number.

Does that mean my wallet can be stolen via SIM swap?

Later it says In the event where your phone is lost or stolen, your private key (recovery phrase) can be safely used to recover your funds.

...which seems to contradict the "no recovery phrase" bit?