Distro developers and user are separate people. Also, a person viewing the QR code is not necessarily the owner of the panicked system.