Over time, you accumulate stale recovery numbers and retired devices still linked to your accounts. An annual review removes the ones that no longer work and could either lock you out or let an attacker in.
“Last year's phone number shouldn't still guard this year's account.”