If so, this means that still anyone could pull X*N sats in total. Like this the implementation doesn't seem to be usable in the real world yet. There would have to be some security mechanism in place to make a payment link non-reusable.

Even entering some sort of PIN doesn't seem to be a fitting solution as this PIN — once entered into a POS terminal — could then be used with the respective LNURL-withdraw link to pull funds as one pleases.

If someone more knowledgeable could clear up any mistakes I made in my reasoning, I'd really appreciate it.

Any ideas yet on how to overcome these issues?