The _Science_ paper linked is paywalled, is anyone aware of a preprint?
I find it a bit curious that they've chosen to use SMS verifications as a proxy for the difficulty of creating an account, when there are similar marketplaces for selling the actual end product of bulk-created accounts. Was there some issue with that kind of data? SMS verification is just one part of the anti-bulk account puzzle, for both the attacker and defender.