they are using the bolt card from coincorner so it is based on lnurl-withdrawal. you don't need to use coincorner in order to use bolt card tho, you can provision it yourself
yep, these just follow the standard lnurl-withdraw flow (with the addition of lud-17 to facilitate bolt card replay protection), POS will also accept standard lnurl-withdraw flow without the need for lud-17.