Signal uses phone numbers as (the only) unique identifier in their system currently so SMS (or phone call) is necessary to verify the device owns the number.

They've been talking about moving away from phone numbers as identifiers for a while and have implemented features like account pins that head in that direction but it hasn't happened yet.

They want to know the phone numbers. Despite everyone telling moxie that it's not secure from the day signal was started.