[rchaud]

QR codes are about the easiest possible attack vector for malware. Is there a decentralized malware scanner that I can pass the QR code through first?

[vmoore]

> QR codes are about the easiest possible attack vector for malware

It's up to Android and iOS (and others) to make sure QR codes are not an 'easy' attack vector.

Why should it be the case that sending an SMS with a (malware-loaded) bit.ly link takes over your phone?

If the phone OS does `principle of least privilege` and sandboxing, and other mitigations then the user should be fine.