Here in the UK we had car payment stations: You enter your car registration number, you pay by card or contactless. Done. Safe. It works.
BUT, this is more expensive for the operator to install and maintain than just sticking a notice to tell you to install an app and to use it to pay.
That being said, usually the QR code is not required it is just to make it "easier" as the notice explicitely says which app to install and provides the unique reference of the car park, too. You may also be able to pay over the phone rather than using the app. This is all shown on the article's first picture.
So, really they could just remove those scam-prone QR codes. I suspect that they don't care, though, and even profit from those scams since they can fine you for not having actually paid.
It should be like cryptocurrency where there is a separation of the public and private key. Or even better, something like chaumian e-cash. I feel like that would pretty much shut down the majority of financial crime.