The current CoinOS cannot do this, unless one runs their own CoinOS instance on their own domain. (which would, today, take a "bit of set up").

However, CoinOS founder shares his planned solution here:

So the payments received (e.g., using the CoinOS PoS interface) could be protected because of the PIN being required in order to spend, and then those funds would be swept (either immediately or eventually, depending on how that sweep feature is designed) to a non-custodial destination.