How hackable is Whatsapp web?

I only use WhatsApp via a phone app.

However, I was wondering how safe/vulnerable WhatsApp web is to hacking?

I mean, it seems you neve to scan a QR code from the phone linked to the account in order to be able to use the WhatsApp web app.

So not sure how someone would get around this without access to your phone?

And if you simply do not use the WhatsApp web desktop app and do not install it on your computer, it is difficult to see how anyone could hack you except by installing malware…

How hackable is Whatsapp web?