[egberts1]

Deployers of QR code MUST now embed some form of a checksum value of undisclosed algorithm to protect the original URL.

Hence another frontier of cat-and-mouse game of security theater has emerged.