He only gives scammers the QR code that leads into his gauntlet. Normal people shouldn't be stumbling into this, as it requires a fake QR code from a fake Bitcoin ATM receipt. This also lures the scammers in as they believe they will receive (someone else's) Bitcoin.
Scammers have recruited at least one victim to try to complete the fake withdrawal process for them. Luckily Kit and his team noticed and got her help. He was live streaming and only showed his side of the call. It has rather sad since it was clear the victim was very vulnerable (a lonely veteran with a brain injury who was being scammed for years).
sure, but you won't be scamming them, so it's all in fun troll spirit. frankly, i've met some asshats in the real world that i wouldn't mind pulling pranks like this on.