The problem

A marketing team prints a QR code on 20 000 flyers. The code points at https://sho.rt/k3Xa9Qz. The long URL behind it has 180 characters of tracking parameters.

Six months later the campaign page moves. The team changes the target in your service, and every flyer keeps working. A week later someone reports one link as phishing, and you switch it off.

Both changes only work if each scan still reaches your server.