UPS offers a REST API to delete variants in the form of 'https://SERVER:PORT/CONTEXT/rest/applications/pushAppID/<PLATFORM>/variantId/'.

However the <PLATFORM> part (android or ios) is not checked and you can use either either value to delete a variant of another kind. This is not a critical bug because you still need a valid variant ID but is should be fixed.