More fun from adobe. They covered their ass this time and said the work around of turning off JS might now fully protect.