Specifically either a phone number or credit card to enable 2FA.

Doesn't the mandatory Facebook account already involve sharing a phone number?

No idea. Up until now I've been able to sideload apks without a FB account (although I did have to agree to an extra EULA). I'm doing some soul-searching to decide whether I capitulate to FB or get rid of my current quest (or try to use it with an Oculus account until it gets bricked)