Can’t wait for the first “scan this code to verify” scam that takes you to a mobile Chrome 0day

Or you could send them to download some spyware/adware Play Store app

Couldn't any exploit possible via that pathway also be executed based on a link? I don't see how a QR code makes the situation any worse.