Users are habituated to clicking links (mostly from their email) as verification, too. QR codes get a weird amount of hate for something that basically amounts to a hyperlink you can transmit through meatspace.
It’s because people don’t yet understand that scanning a code can be just as risky as clicking a link. They will trust whatever they see on the other side, while they may be more suspicious of what they see after following a hyperlink.
