They don't have to with QR codes either, unless you're willing to enumerate all possible codes in their verifier.

Also the thing is not stopping anyone from providing a wrong code. Unless every transaction concerning their shoes is recorded on the block chain, which it won't, and which brings privacy issues.