Thanks for the details! It’s nice to learn that it you tried it already 
I suppose it’s possible to transmit the expected SMS format along with the verification request to the server but… 
cost vs benefits right?
Also I find it very thoughtful to not force the permission on 5.x, kudos on that!