There might be a -slight- difference in odds though. Getting exploited through complex badly documented file formats with a large attack surface using software

There might be a -slight- difference in odds though. Getting exploited through complex badly documented file formats with a large attack surface using software with unknown source code, versus Simple compact well documented formats with a small attack surface using a reader with inspectable source code. (even better if said source is actually regularly inspected, of course :-p)