[whatifitoldyou]

OK, in theory one could use an exploit on the PDF, to compromise the sandboxed converter and create a malicious image. ...in theory.

[matteotom]

She explains that: the converter outputs a size and a stream of rgb values, which are easy to parse and verify, and the worst thing that could happen is you get a bad output image.