My old person trait is that I think 'ghosting' is completely unacceptable and you owe the other person a face-to-face conversation.
And then the QR code does not link to a menu but an app instead. So you need to install an app and allow weird permissions not related to the ordering of food for said app just to see that it only displays a static website in a Chrome custom tab.