There's some AV packages like Lookout that are pretty common in corporate environments.

And really any big data collection through apps will make itself to servers eventually if course. You don't need to open a URL for this to trigger, the eicar code being in memory of a process is enough.

Of course you do need to decode the QR. But I'm sure many environments focused on video data collection would device QR codes.