My comment when I saw this is that they should really have the QR code point to a redirectable URL. If their address was compromised for some reason, it'd be a pain in the ass (perhaps literally) to have it changed.
Hey, realsteve, here's a pic for you:
Enjoy,
Ben