[mschuster91]

Good luck doing that for stuff like PDF which can include JavaScript in the PDF file itself, or SVG+PDF which both can include raw font files, another reliable source of exploits.

[GoblinSlayer]

PDF/A-1 and PDF/UA require unicode mapping, so embedded font files might be not as critical, you can just render unicode text, and javascript is routinely banned for being inaccessible.

[Wowfunhappy]

Do any PDF readers other than Adobe's support JS? Apple's certainly does not, unless something has changed recently.