The idea is to let users maintain a portable database of very strong passwords. Since the credentials are transfered when the QR code is scanned the user doesn't need to remember or enter a complex password. It also eliminates worries about keyloggers since no information is typed.