The most surprising thing about this article is that Google did not see this coming. This attack vector is a very basic one considering the device, and QR codes

The most surprising thing about this article is that Google did not see this coming. This attack vector is a very basic one considering the device, and QR codes have had security problems before. On the other hand the product is still in testing to catch issues just like this. We can hope that the final product is much more secure.