I’m not actually saying they have poor security, authentication is authentication, you need to be able to trust your carrier regardless of if your SIM is physical or an eSIM. I’m saying the two approaches are essentially equivalent.

You’re aware your provider can turn your current SIM into a piece of inert plastic via a migration access code. That’s what I just described.

Whether it’s physical or software, your carrier has 100% control. You cannot do anything your carrier doesn’t want you to with it.