Execution, integrity, and provenance determine PDF safety.
There's a lot you can automate.