Let's take this scenario one wee step further:
You go into the restaurant, scan the QR code (which sucks up a bunch of data about you right then), scan the menu (more data "sluuurrrrp"), order (ditto) and pay (sluurrrrp).
If you're cool with all that, then maybe your are also cool with the security cameras connecting your QR code (with your name and a ton of other data about you) with your face, your gait, your behavior and your date's facial scan and their behavior during the date and sending all of this to some anonymous data broker(s) to do with as they please?
Or would that be going too far? How do you know they're not doing this already? (I mean, they probably aren't...yet...in most places...yet.)
So, how far is too far for you? Maybe we should just stop this shit in its tracks and roll it the fuck back? Or nah?