“If an attacker changes only the QR code, voters have no way to detect the change by looking at their ballots, since voters can’t read the QR code. The change might be detected in a manual recount or a risk-limiting audit (RLA) based on a review of the printed text, but that is unlikely given Georgia’s weak audit requirements, which have recently been further diluted.”
Also it’s a poor decision by Georgia to not install security updates until after next election, but that’s the state’s position currently. I watched some of the Georgia congressional hearings regarding election security, audits, and safe guards after the 2020 election and it seems like their board of election was a total shit show. It seems like paper ballots and counting could prevent all of the problems or alleged problems they experienced in the last two major elections.