The idea was to seek spots in the city where public web cams are pointed at, and paint QR codes on the ground at those spots (using a template), linking to the camera stream. So when curious passerbys scan the code, they see themselves in a camera stream and feel "watched".
That's about the difference between eating sodium chloride and eating sodium.
Those guys always obsess over CVEs and privacy and they’re always wrong about everything but have learned to mimic the language of people who know stuff. “There’s some evidence” / “here’s a source”. Ugh. Can’t stand it.