Number one: DO NOT SCAN QR CODES IN THE WILD! Even a QR code affixed to the table can be overlaid with a code that directs you to a malevolent site, one that can very effectively mimic a valid site. If absolutely necessary, a code handed to you by the server is not as risky but not optimal.