qr codes cant really contain a zero-click malware, theyre just links (unless theres a terrible vulnerability in the browser which there probably isnt)
Also no device just opens those links without user interaction