Seems poorly thought through. Some chump with Photoshop and a text editor could replicate this but change the QR code to a malware site in minutes.