It's not very secured at the moment, but I like the satscard approach with a printed code on the card. This can be implemented for lnurl as well.