a statue is a permanent installation right? how do they prevent one guy scanning it and sharing the URL(?) to everyone?
or just bookmark the url and open it again next day without scanning the statue again.
or just bookmark the url and open it again next day without scanning the statue again.
It looks like the QR "statue" pivots to correct for the changing path of the sun across the sky, but the positioning doesn't have to be accurate to the point of working exactly from 12:00:00 to 13:00:00 local time. You can also add enforcement on the web server.
This isn't really about being secure - it's about clever marketing. And it definitely succeeds at that.