> I confess that I don't know if those other formats autoupdate like apt does or it's a manual user operation. For Flatpak the updates are automatic, at least

> I confess that I don't know if those other formats autoupdate like apt does or it's a manual user operation. For Flatpak the updates are automatic, at least on the version I'm using with Debian Buster. In my opinion they care enough about vulnerabilities (but I would say it depends on the packager), currently the Flatpak Evince doesn't have support for PS files (so for now only PDF) for security reasons (I don't recall the details, it's about the Ghostscript interpreter, there's an open issue on the BTS). Edit: the issue https://gitlab.gnome.org/GNOME/evince/issues/1058 https://gitlab.gnome.org/GNOME/evince/issues/1058