You’re right, I must have been thinking of something else. Happily I can’t find any chatter about actual malware in QR codes (it’s all redirecting to malicious websites), though obviously there’s always the possibility of a new exploit being discovered.
ACE on a WiiU is just as easy, at least with the Wii you had to use a game!