Users regularly do that when they scan, click and navigate to potentially untrusted internet resources with only a machine-readable matrix – a QR code – to lead the way.