PDF has been an entry point since forever, it is extremely complex and can in some cases even run javascript, it has a huge attack surface.