> Or they scan at the edge on the user's device.

So then the user can "just" install their own client.