At least with PIX, you scan the QR code directly on your online banking app, so there's no risk of going to a "fake site" (and the app also displays the information extracted fron the QR code, it's not a blind payment).

Scanning a PIX QR code with your camera will just result in text, not a payable URL. You have to scan it in your online banking app for it to be processed as something.

Your banking app will load the details about the payment and you'll see the recipient details before performing the payment.

Even with regular barcode payments, these barcodes are registered with the bank before it's a valid barcode. A lookup is done, if it exists the recipient details are displayed, often the amount, and verifications that it has not expired. (Do not receive after date X)

Brazil has a pretty decent banking system, though the worst online-banking experience I've ever had. (Slowly improving)