content: Sure, yet another attack surface is only incremental, but it's there and will be exploited.  The insanity is that the QR code links to a page with no useful information.  It's purely a marketing stunt.