And most UPI are linked with phone number, so you can also pay via phone number if UPI is linked with it.
it's literally one of the least secure things you can have.