

Not sure about Android, but on iOS, when one scans a QR code it shows the web address on the screen that the user then taps on. For the average user, I doubt that they are going to question what the URL is before following through to the website.
Android does the same. The problem is most of those QR codes are encoded short links which tells you nothing about where they’re taking you.
https://short.link/au1034gha
could take you to a PDF on the restaurant’s Wordpress site or it could take you to malware or somewhere else you really don’t want to go.
In that case, I blame the people generating the codes for using URL shorteners. My org uses them in flyers for the public, and I always have to chastise them and re-create the QR codes because they run the URL to our website through bit [dot] ly. 😡
I generally dislike editorialized headlines (when used as post titles) but this is the exception. Nicely played.