Phone numbers are NOT safe. I don't know why SMS MFA is even a thing, they're worse than passwords.
When you use phone numbers or SMS for security, you are putting the fate of your entire company's security on an underpaid customer service rep at Verizon.
At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description