Passwordless New Universal Login doesn't halt on Pre-registration Action api.access.deny

Still happening a year later. I guess at least the SMS is not sent.