Because of the increased attack surface and maintenance burden. Which is totally understandable. But JPEG-XL should really be supported...