And yet browser PDF viewers still have vulnerabilities and hackers keep finding sandbox escapes.