>>automated malware that will abuse this How does this happen? Is it that the malware reads the contents of the email on the pc?

Regarding the QR code vulnerability, how do you know if you are scanning a harmful QR code?