UPI is designed to adhere to the two factor guidelines of RBI. If you lose your SIM card/mobile, the other person would still need to know your UPI PIN and/or the login PIN of iMobile and Pockets to transact on your accounts.