There’s an elevated hijacking risk with eSIM. If a hacker is able to social engineer a customer rep into thinking they’re you and requesting an eSIM swap, or they get into your account by recycling a leaked password you used on another site, it’s suddenly really easy to take over your phone number from halfway across the world.
They could call a premium number they own to extract money from you. They could request SMS-based 2FA tokens. I’m surprised it doesn’t happen more often.