Having the QR in your photo roll doesn't break the 'not phishable' property.