Qrs may have other data, not only links, and there is always the extra (but minimal) risk of a vulnerability in the qr reader itself. Other than that, it's the

Qrs may have other data, not only links, and there is always the extra (but minimal) risk of a vulnerability in the qr reader itself. Other than that, it's the same as clicking a link on an email, yes.