Hello!
In the age of remote learning/teaching I started using Edge to draw in .pdfs I’m showing to my students and it really fits my basic need, but something more focused on the task and in spirit of FLOSS would great. What’s most important to me is ability to draw and easily erase what I drawn; handy page switching. More would be nice ofcourse.
I couldn’t find anything like that, and software like Krita or GIMP doesn’t work well for my needa, that’s why I’m using Edge.
Obviously, Linux would be better for avoiding Microsoft, yeah, but if that’s not preferable for other reasons, then Windows without a Microsoft account is still massively better than Windows with it.
And honestly, I don’t feel like auto-upgrades are that important in a niche PDF reader. The chance that someone targets Windows malware against Okular or libpoppler is pretty much 0. So, just grabbing a new version every year or so, is probably fine.
The thing was not specific vulnerabilities but improvements and fixes.
There could be some performance issues in some documents, crash under undetermined conditions and ofc general vulnerabilities not dependent on this tool could be taken into account.
Okular is not just document-library + own code. There are other libraries involved and Qt is a big framework with wide use and surface.
Yeah, alright, Qt is a fair point. That might actually get targeted by an attacker.
Personally, I would still deem a Microsoft account a bigger security risk than only updating Qt every few months (if you set yourself a reminder to e.g. grab the newest version every 3 months).
But yeah, that’s where it starts to become subjective and not something one can give as general advice.