Using the PDF viewer and security?

[ajay]

Back in August I asked that question in a thread now closed.

Using the PDF viewer and security

Could somebody please help me understand whether importing PDF files into my Joplin profile / notes, and viewing them with the built-in PDF viewer (enabled in settings) could actually increase in any possible way the risk that malicious code is executed inside Joplin (by the viewer) ? In other words, could there be any "active" instructions inside a PDF file, which (just for example) an Acrobat Reader or a virus scanner might detect and avoid, but which the built-in viewer may simply execute ? …

I think it is worth reviewing because of these answers it produced at the time :

• from laurent : PDF is NOT a product by the Joplin team (so that is a concern)
• from roman_r_m : it is disabled by default (may be less a concern ?)

I re-searched the matter a bit further, and I am still convinced that any PDF (viewer) can be a problem to data security. AND, in my desktop version (2.13.2) just downloaded and installed I found that the PDF viewer was ON by default.
The security concerned Joplin user will turn this option OFF and leave it off.