PDF has been an entry point since forever, it is extremely complex and can in some cases even run javascript, it has a huge attack surface.
Why can't Apple just sandbox the damn thing? Run the renderer in a VM, call it a day.
Or just spend a few billion tokens rewriting the whole chain in a memory safe language. This nonsense is inexcusable in 2026
loading story #50217708
loading story #50218575
loading story #50218227