The bulk of the QR code is about specifying, quite exhaustively, multiple means of error prevention, detection , and correction. I guess some applications don’t use these features effectively, but compliant QR codes are really quite hard to corrupt.