The problem does not come directly from WhatsApp, but from a ‘trusted’ third party on which the application relies to validate a user’s legitimacy: the telephone operator.
When a user logs on to WhatsApp, they have to prove that they have a phone number, and to do this they receive an SMS or a call. But these can be intercepted and stolen.
To protect yourself, you need to activate double authentication. This requires the user to remember yet another password, which can be forgotten, leading to frustration and overloading support.
The security of an application is always defined by its weakest point, which may be part of its distribution chain. This is a general issue that must always be taken into account for every company in every field of activity.
