The goal isn't to be secure. As far as I understand it would basically be similar to Starbuck's current mobile payment service, where the scanner reads the code

The goal isn't to be secure. As far as I understand it would basically be similar to Starbuck's current mobile payment service, where the scanner reads the code which maps directly to an account and processes the transaction. No two way communication.