Pretty sure that today's PDFs are infinitely more secure that EXE's in the 1990's. There is a sandbox and no native code execution in PDFs.

(That is, unless you use Adobe's PDF reader, which seems to support JS for some weird reason and has an RCE almost every month. But given there are tons of alternatives, you must really not care about security to use it for personal purposes)