[gynvael]

Web view is planned, but we're not there yet.

That said... you do realize, that web view (browser) has equally huge attack surface as PDFs do, right? And a lot of PDF viewers are either sandboxed (Chrome PDF viewer, Adobe Reader) or even written in JS (Firefox). If you're worried about this though, there are services on the internet that convert PDFs into a series of images. You can also view the PDF through e.g. Google Drive or similar services, which do PDF parsing and conversion server side.