If you don’t have full control over your tags, don’t use NFC. Tags could be overwritten or just changed by attacker. Would you blindly visit some url? I guess not. Essentially it’s the same here, you do not really know what’s on the tag.
Real life example: in some school kids were receiving their daily schedule scanning tags at the morning. There were million ways to make things simpler, the school just got fancy. Result: it took two days to reprogram them and put there pornhub address or smth like that. And they never found who 
3 Likes