Trezor breach victims now getting malicious QR codes by postal mail
domainsure.com
domainsure.com
You will struggle to find any QR code that is meaningfully harmful in the scanning of itself. If such a day zero ever did exist, it sure aint getting wasted on random civilian users.