If you ever did want to wrap this in code processing untrusted images there's a library called "glycin" designed for that purpose (it's used by Loupe, the default Gnome image viewer).

https://gnome.pages.gitlab.gnome.org/glycin/