qr codes cant really contain a zero-click malware, theyre just links (unless theres a terrible vulnerability in the browser which there probably isnt)