Understanding the Fine Line Between Security and Resistance: A Guide to Static URLs in QR Code Applications