One could argue that removing the UPI QR code from the app would be the truly malicious act .. and at least they're keeping it in. If they could do that, they would. NPCI regulations require these payment services to interoperate via UPI. If they hadn't required that (I love NPCI and their work), you can be guaranteed that the UPI code will not feature in the app.
