I use markitdown[0] religiously. You’ll lose fidelity for anything complex (math equations, images), but it does a great job 95% of the time in my experience.
I’m assuming the attack surface is reduced. I invoke it through a docker container. But this might be a misplaced sense of safety.