How safe is it to scan that QR code in the pub? Or in that email?