Consider the following statements regarding the BHIM app and card-based payments:

1. The BHIM app allows a user to transfer money to any bank account that is enabled on the Unified Payments Interface (UPI), regardless of which bank issued that account.

2. A chip-and-PIN debit card offers four distinct layers of authentication, making it inherently more secure than BHIM, which offers only two.

Which of the statements given above is/are correct?