The flip side to this is that when you do come across a forged PDF (and I have!), they can be really, really effective. Nobody expects them. There are usually tells in the metadata, but... there don't have to be.