I don't doubt that. In my experience sometimes a phone number is required and sometimes not. When it prompted for a phone I didn't find a way to work around that.
I find that when I create a dummy account from a clean browser (no cookies) with a VPN, a phone number is required. I wouldn't be surprised if they do some internal risk/dodginess assessment based on several factors.
They do sometimes though depending on how "risky" they deem you based on a secret criteria. I've never been able to bypass their phone number requirements.
This is not true in general. It probably at least depends on the country you try to sign-up from probably other factors.