How is this scenario any different when you tell your friend the password or show them a QR code? They can still get and share that password with anyone else...