Recently I found out about the new way that one can login into Google via a simple QR scan.
Seems to be similar to an application specific password or time-based token.
What would this mean for accounts that already have access and are known?
For example, if one were to enable 2-step verification on their account and on the necessary devices, would the browser in which the URL was invoked automatically sign-in without the warning message displayed from a QR enabled mobile device?
Or is this an independent set of security altogether?