Most of the restaurants I've been to the QR code takes you to a PDF of the menu as found on the restaurant's website. There's no auth and no way to track anything beyond I guess how many times people opened the menu file. Restaurants aren't doing this for tracking, they're doing it to stay on the good side of public health regulations in a period where they've learned they can be forcibly closed with barely any warning.