Everything worth knowing, nothing that isn't.
IMSI vs MSISDN
The MSISDN is the external routing number; the IMSI is the internal network identity. The two are decoupled: MNP lets a subscriber keep their MSISDN while their IMSI stays with the SIM. An SS7 SendRoutingInfoForSM query returns the recipient's IMSI plus the serving MSC — which is exactly why that operation is a fraud target. See /answers/what-is-msisdn and /answers/ss7-map-send-routing-info-for-sm.
Why the IMSI is sensitive
Because the IMSI ties directly to a real subscriber, its exposure enables tracking (the classic 'IMSI-catcher' attack) and SMS interception. 5G conceals the permanent identity behind the SUPI/SUCI scheme so it is never sent in the clear. Operator signalling firewalls guard IMSI-revealing queries at the network edge. See /operators/ss7-firewall.