Execution, integrity, and provenance determine PDF safety.
A handful of commands can go a very long way.