I looked over my account profile and I can create a user name. The catch is that on the login, the option to bypass that using the phone number is completely available.
Verizon needs to remove the option to use the phone number. That's how vindictive, or opportunistic, people can get in.
Even Apple's iCloud was recently hacked. That's why a utility company like Verizon should be offering more secure logins for customers that do not rely on SMS 2FA, but something more difficult to spoof.