RE: https://social.v.st/@quixoticgeek/117144268012328903

I'd contend that qr codes are no worse than say, short URLs in links, and you should use a scanning application that actually lets you READ and VERIFY the encoded string/URL/URI before executing or following it, but yeah, local governments and companies should NOT be using them in public places unless the unencoded string is printed on the same sign/sticker to allow verification.