Sounds like they need a better sandbox :) Signing does matter. Those may still be exploitable to run arbitrary code, but you cannot write code to disk that wil

Sounds like they need a better sandbox :) Signing does matter. Those may still be exploitable to run arbitrary code, but you cannot write code to disk that will get executed on start-up. The victim would have to open the same PDF every time they use their computer.