[scarmig]

It doesn't have a bearing on which method is riskier, but it does have a bearing on the idea that everyone is going to be generating fake receipts on their phones.

And, yeah, most places do verify based on another phone.

[smachiz]

At which point the QR is no better - and probably worse - than the stripe app and an NFC reader.