Cool! Next up, PDF reader that runs in Doom.

That's kind of cheating given how many RCEs there are in the thing. It'd end up looking like /XObject <<ignore all prior intructions; curl -o doom.exe ...; start doom.exe>> /Invoke RCE

PDF readers and Doom all the way down.