My security advice is: if you are feeding documents to your AI whose authors might have adversarial intent, transform them into photos and run OCR on them. Yes, it is wasteful and slow, but it is a guaranteed way to get rid of invisible (meta)data.
Granted, the OCR does not have a perfect 1:1 correlation to what the human eye sees, but IMHO as of November 2026 it is a fairly good approximation.