Why is it OK to allow enumeration of accounts with a given phone number, when it is generally considered to be a privacy and security violation to allow someone to enter email addresses and confirm if they have an account with a service or app?

I've never understood this idea that phone numbers shouldn't be protected the same as email addresses or other personal information.