Comment by Chilinot

PDFs can do all sorts of shenanigans, such as bundle executable javascript that runs when the file is opened.