I don’t know about UPI, but those concerns can be mitigated by not operating on public networks. The SWIFT payment network for example is private[1] and is only accessible via dedicated routers.

[1] https://www.exalog.com/en/swiftnet-network-banking-communica...