Yes it's partly an oversight on Whatsapp's side ie. they should not disable the whole account, just the new device. But phone numbers are often known, so it is quite easy to sabotage someone's account this way. Good services like Threema and others won't even require your phone number or e-mail address, so it is...