in which case they can properly identify themselves as a legitimate user of that US phone number? I'm not familiar with the STIR/SHAKEN stuff but surely it is possible to delegate authority to use a number.