> First you say that people should just audit the code if they don't trust it. Then you say if someone wants to read untrusted files they should just spin up a

> First you say that people should just audit the code if they don't trust it. Then you say if someone wants to read untrusted files they should just spin up a virtual machine? Because of an intended functionality of many of those file formats, which makes them quite dangerous when coming from untrusted sources: Macros.