Can confirm, I found creating a new Microsoft account and doing literally nothing with it for around half an hour is suspicious enough to lock the account and require a phone number.