Registration without a phone number on Signal will use zero-knowledge proofs

Once phones are gone from signup, what do they use that attackers can’t mint cheaply?