send it to a website that breaks down the code
This is one way for malicious actors to feed you their data. There are many sites that change Bitcoin addresses in QR-codes. If you do this, at least process the data locally with trusted software. I only use
qrencode, which is included in my Linux distribution. I've never felt the need to decode a QR-code on my PC, but malicious software can replace data in during encode or decode.
Yes, you're right. But I think you get the idea of what I meant.
To use a QR code without using a camera scan, you always have to use an additional program to verify it. It is not practical, it is not easy for most people, and it can be insecure.