Yeah, this is going to turn into another malware vector, isn't it?

Discord has a feature where you can log into your account on your PC by scanning a code on your phone.

So does Binance.

Those are good things though? They’re about logging in, on purpose.

Not about attesting to Google that you have a proper smartphone as a proxy for your humanity, like this thing.

To prove you're not a bot, scan this QR code with Discord.

But none of those options are requirements to access the service.

They're requirements to access my website though! To prove you're not a bot, scan this QR code - with Discord.

So does Signal.

But Signal is secure(TM)!