You can scan its content without getting thrown into trouble, I use an app like SecScanQR which returns the raw content of the QR code, that helps to assess if you’re getting into fishy stuff.

If your app automatically opens the link, yes.

Not all do that though.

You shouldn’t open the URL, but you can scan it to see if a url is recognized