@tomo @alfredohno I’m a huge JXL advocate but it has the exact same issues, potentially worse because the implementation is newer. And to be clear the only reason you don’t hear about JPG and PNG executing arbitrary code is that we had all those disasters a decade ago.