But the scam described in the first link is not much different than what is plaguing Microsoft Authenticator in phishing mails. Sending a QR code and getting so

But the scam described in the first link is not much different than what is plaguing Microsoft Authenticator in phishing mails. Sending a QR code and getting someone to scan it to steal OTP access. It's still much better than anything we had before, and it is after all 20 years old. So I can see that there is room for improvement. So what is a better eID implementation? Freja?