[JupiterMoon]

By doing this the chain of things that have to be broken for an exploit to escape is getting longer.

[leni536]

So the best thing you can do is to nest different kind of VM hypervisors with different OS guests and read the pdf in the innermost machine.