It's a basic steo to prevent bots from joining.

On Twitter it didn't worked because it is optional there and you can still use your account without a phone number.

If you don't trust Bluesky, check out their public repo and privacy policy to see what do they do with your phone.