So basically as long as a hacker wouldn't mind paying your phone bill for a month they could easily take over billing of it, then clean your accounts out, then cancel the number.

This is another one of those messy human areas where computer systems are either too strict or not strict enough.