Not going to try to justify Apple but feel like a piece of info is missing from the post. How did they unlock the phone? Maybe the phone had no auth set up?
In general, it's expected that you should be able to update your own phone number in your iCloud account.
In general, it's expected that you should be able to update your own phone number in your iCloud account.