free software doesn’t necessarily mean federating with other services.

They have stated their reasons why they don’t wanna do it. You might disagree with them or not. But the technology they built is still open. Anybody could take what they created and use it as a foundation that does federate.

This type of attack theoretically also works with signal or telegram or whatever message service that works entirely without a phone number.