The SMS bomber wave of 2021 taught us a crucial lesson: While many of the vulnerable APIs from 2021 have been patched (Cloudflare Turnstile and Google reCAPTCHA v3 now block mass SMS triggers), the risk hasn’t disappeared.
Fact: An SMS bomber attacks your phone number, not your device’s data. Factory resetting wipes your photos but leaves the vulnerability intact.