> If people swap out QR codes with malicious ones in real life, that could have all sorts of implications. This can already happen with a QR code and a website

> If people swap out QR codes with malicious ones in real life, that could have all sorts of implications. This can already happen with a QR code and a website? I doubt these aren't going to be heavily sandboxed.