As PDF may contain malicious code, is there any easy to use file format providing the same features ? If not, could you share recommendations to limit the attack surface for average users ? (exclude Qubes, sandboxes, scans, ...)