Even your simple example, MP3 decoders, that do one thing, have had code execution exploits and other security issues over the years. WinAMP had CVEs for it.

Even your simple example, MP3 decoders, that do one thing, have had code execution exploits and other security issues over the years. WinAMP had CVEs for it. All software will have bugs. I want my fixes fast and often to an environment where I run untrusted code from that many places.