It's hard to spoof the originating ID of a text message as it's handled by the network. Any other sender needs your password.
Adding to this. It's easy to spoof the CID for a voice call... For text messaging, it is a bit more difficult as you need to compromise a network level SMS gateway from a provider. If someone is doing that, chances are they're not looking to screw around with someone's OVMS.