Afterwards Twitter was full of security people complaining this teaches people to scan random QR-codes, and that this apparently moved security awareness back several years.

I thought that by now "everyone" had seen this part of the discussion, but it seems like I was wrong and it was just my little Twitter bubble.