I do agree that, to a certain point, this shouldn't be possible in this volume, but also, when you add a phone number as a contact, it would show up on WhatsApp as long as the profile has public data. Anyone that saves every possible phone number would have the same result (although this could take ages, thus the issue with the scraping)