[Jwarder]

Is there a good no-nonsense way to clean PDFs of possible threats? Hunting around I see mentions of converting PDF->Postscript->PDF to remove junk, but I also see mentions that Postscript is its own security mess.

[jabroni_salad]

Your only option is to disable all of those fancy features. That config only lasts until someone needs to file a form with the government though.