I don’t understand your question. One is an authorized user and one isn’t? That is the opposite of an attack.
Okay, let me explain it a different way. Much like TCR is in principle supposed to be about blocking phone spam, wouldn't it just be a matter of time before cell providers start cracking down on cloned SIMs with the intention of preventing criminal activity? Whether you cloned the SIM for legitimate use or not.