I think the original landlines, which were/are a few switches connected to a write on one side and some microphones on the other, were close to inherently insecure. Phones haven't ever been "your device" whereas a laptop might, maybe be rendered trustworthy.
I don't think the smartphone is inescapable at all, and I don't think any of the conveniences it offers is worth surrendering one's privacy. But there is a tendency in businesses to ignore the fact that some potential customers do not have smartphones. I wonder if legislation against this might be possible.
There is one smartphone with those: https://puri.sm/products/librem-5. The alternative one, Pinephone, has quite inconvenient kill switches.
One of my banks has been closing branches left and right, and if I want to use my accounts for anything other than debit purchases, I need to use the app. Some banks even charge you when you go to a branch location in person and use a teller to access your accounts.
Some jobs require you to install and use apps on your phone. Last time I was a big box retailer, the floor staff had the company's app installed on their phones so they could do instant price look ups and confirm discounts on their store's inventory.
Even just applying for a job requires an internet browser, and many people's only access to the internet is through their phone.
Is this really true where you are? No menus?
I was also at a play where a QR code was the only way to get the program.
Using your device to read the menu puts your device in the loop where formerly it was not.
It's not comparing websites accessed via QR against every other already tracked thing in society, it's comparing it with laminated pieces of paper.
I didn't mean they generate QR codes dynamically. It wouldn't be hard at all to encode the table number, for example, and then of course they have the time and know your reservation, and thus can identify their customer's phone.
You're not wrong that this fundamentally excludes those who don't have (powered-up) smartphones. But it's not like restaurants and bars had the luxury of thinking through and choosing to have these effective new smartphone requirements: they adapted to Covid for their survival, and the odd case who got unlucky with a dead phone is just collateral damage.
I'm in Canada, and we use QR codes, signed by the government, to show and validate status.
Mine is printed out, and in my pocket. No phone is required.
Thus, no one needs to avoid anything, phone or not.
Also, in your case, is this a federal system or a state by state one? If the latter, this sounds way worse than what NY is doing; with my CA vaccination I couldn't get in anywhere.
The QR code is provincial, but it only requires minor changes to have one provincial app, look at other validation sources.
I agree that sadly, restaurants may find some metrics too high/annoying to deal with, and opt for a lost sale.