@unascribed Unless there's a "url shortener" involved, that requests the url at realtime and issues a redirect. But then I'm not sure if handling of the url would be in browser's hands.
Anyway, this is a bug in discord and not in qr code readers: calling externally visible activities is something that should not be understood to carry user intent, because any app can do that.