@hfaust All the formats relevant in the chain are pretty much irreplaceable, or at least none of the actually used replacements are seriously better, like ePub is much worse, only exception is maybe CBZ.

Also it's fucking Apple and so not transparent at all but given how CVE-2023-41990 is Apple specific, I wouldn't blame the format in this case (TrueType can be particularly nasty though).