In the last few months, we have reduced the SMS verification upon signup to a minimum.
just because a VPN or exit node has been used before doesn't mean SMS is the best anti spam measure, I don't know what data you're operating on or what's better for that data, but it undermines the privacy aspect for an SMS prompt to ever be triggered