I've been working on a project to reduce attack surface of Linux document readers, starting with Okular: https://github.com/l4rzy/okular-mupdf-ng

The idea is to sandbox the most dangerous parts of it: The Document parser and renderer.