Update phone

account.updatePhone(
'+12065550100', // phone
'password' // password
);
If i whant to add the Phone number of a client i need his password. Ok i'll do it a the subcribe , but what if he use google auth ? or any OAuth2

I hope this has change , just put a jwt option or a route whitout the password , why do i need the user password for that info that unnecessary let me manage that myself