Don’t trust QR codes, says Davey Winder, as he explains why they’re so favoured by cyberattackers – and what steps you should take to avoid their traps