Comment by CiPHPerCoder

SVG also has more risk: stored XSS, which isn't something you'd expect from a file whose MIME type starts with "image/".

https://github.com/w3c/svgwg/issues/266