We have had end users scammed because Android QR code readers show scammy "pay now" ads. We do not support online payment but that does not prevent non-technical people from clicking large UI element-like ads and entering their credit card information on nondescript online payment pages.
