How else could they have swapped the phone number on the iCloud account? That’s the only part of this story which is interesting.