Can a customer just type in a table number instead of scanning?

No, deliberately. Your normal link never offers dine-in; the only way into a table order is scanning that table's card, which carries a random ten-character code rather than the table name. Nobody can guess their way into "table 12" or order to a table they are not at.