I don't have much to add, other that this QR code is a timed one-time pad, so it expires rather quickly.

Visit the site and leave it open for a few minutes, and you'll get an expiration popup. So, people aren't going to be rummaging through the cache or snapping a screenshot at the cafe and going home and logging in as you.