This feels like a weird pitch. Yes, the way it works right now is that it loads a fresh QR code every time. But that’s a design choice they made, and they could make a different one. We’ve managed to make secure payments work using phone Wallets, and for those, the phone is performing a handshake with the reader as opposed to sending fixed, static credentials. Likewise, when I add an airline ticket to my Wallet, it automatically updates periodically if my gate or flight time change. Why wouldn’t we be able to find a similar solution here?