What a trainwreck of an article. The tracking is allowed by URLs, not QR codes. The title might as well have been 'Written text is here to stay. So is the tracking it allows.'.
At that point, it hasn't even made a request to that website, so I _will_ know beforehand what I'm opening.