I haven’t used it heaps but it has never failed for me so far.
I think you’re right about the pre-populated codes. I don’t think they do user verification at runtime. That would hurt the self-checkout experience even more - their app is already painfully slow. But as the author said, stupid decisions have been made.