They aren’t required to verify who signs up for the service, which is the crux of the problem. Records are useless if they can’t be associated with an individual.
Forcing in person sign ups with strong identifying requirements solves the swatting problem, because every number is directly associated with who is using it.