A “QR code system” is just a method of pointing you to a website. That’s it. What SHOULD be happening is that website should link to a government database that the contact tracers access when dealing with a cluster.
It shouldn’t be as hard as we’re making it. That’s where the system is falling down.