Surely your claim can be backed up? Exploit code in PDFs should be obvious to point out.
“Yeah right, then how why or who” is complicit ignorance.
I am quite certain a covert chain of qualifiers may be achieved for targeted attacks of many varieties.
Sometimes the paranoid have a point and delusion is a matter of whose contrivances measure acceptable norms of presumption.