qr codes cant really contain a zero-click malware, theyre just links (unless theres a terrible vulnerability in the browser which there probably isnt)

where there is a will there is a way :p