Note the answer to the first question in my post

"I am being asked to provide a phone number to get back into my account, is this legit? If you logged in and were taken to a special web page that asks for your phone number then yes"

If you get a request for your phone number and/or password via email it's a scam, report it using the "report phishing" menu option in the menu at the top right of the email.