They are short-lived, but you should still avoid sharing them with anyone you do not trust.
Answer
QR codes and room codes are short-lived session codes used to identify the connection target. They add protection, but they still need to be treated as private.
How to use them safely
1. Do not publish the QR code or room code 2. End the session when you are done 3. Avoid sending code screenshots to untrusted places
Notes
The codes are designed to expire quickly
Starting a new session refreshes the displayed code
For better safety, only share them with people you trust