UPI accounts linked to inactive numbers pose a serious security risk, leading banks to actively remove such numbers from the UPI ecosystem.