QR code content
A QR code is a pointer, and what it points at is yours — the words in it, the address it opens, the logo in the middle of it. So is the responsibility for all of that.
We do not review codes. Nothing here checks a destination against a malware or phishing list, so a code of yours working is not us having approved where it goes. What the software does check is the shape of a dynamic code's destination: it has to be an ordinary http or https web address, it cannot carry a username or password inside it, and it cannot run past 2,048 characters. Those rules are applied when you save a code and again at the moment somebody scans it, so a destination that stops being valid stops resolving rather than being passed on.
Two things worth saying about other people. Do not put somebody else's personal details into a code — a contact or event code, typically — without their agreement. And do not use a logo, brand or image you have no right to use.