Couldn't someone snap my qr code whilst I wasn't looking and have access to my account on their phone? I think there's some interesting uses of qr codes for authentication, but I'm not sure this is one of them.