The trick is to click the phone icon to the right of “New Conversation” input field. That will show you a list of your contact’s phone numbers. I know the tooltip says “Make a call” but that’s not all it does.

You may be right about the actual security deficit relative to other web-facing places but what you are forgetting is the exposure risk calculation.