No. People said the same about Google and Facebook collection phone-numbers for security purposes, but the truth is, extra authentication methods like these are crucial to recovering accounts in the event of attacks. In any case, security teams at major companies are usually at-a-distance from product teams.

In addition, companies like Facebook and Google have a distinct incentive to keep their product spam-free. This means that, so far as spam and security are concerned, the user's interests are completely aligned with the company.