@quixoticgeek So what needs to happen maybe is a way to certify that a QR code you are scanning is legit.

Maybe a signed jwt as the qr code payload. Then the reader can verify the signature and the id of the signer before making it navigable or whatever.

Then somehow magic everyone into forgetting qr-code readers that don't do this exist.