I mean it _technically_ isn't an OTP, but you know what I mean - just a code only the user knows that they need to share with the rider.

The threat model is sufficiently low to justify the much better UX of not having to look the code up everytime.