It's less about PDFs specifically and more about normalizing the behavior where people just scan QR codes off stickers and then download and execute whatever arbitrary file the page wants to serve them.
It should be (and, for the most part, is, modulo occasional 0-days) safe for regular users to visit random urls on their mobile phones, even if they trigger a download. If that isn't the case, we have failed as developers.
