Take QR-code menus with a side of caution, say privacy experts