I don't host the images myself for this reason.
If the code of your page will be changed, that will show any image.
And for changing the code of Your page is only needed PW and username in most of the cases.
Just test the QR code once before you publish it
That is a valid disclaimer.