It's kind of a downer that the article didn't mention Safari which seems to take a different approach to PDFs. Instead of treating them as "active content", PDF documents are merely rendered with Quartz/Core Graphics and so are free of scripts of any kind. This also has the upside that PDFs look exactly the same everywhere on macOS/iOS, even Quick Look previews.

I like Safari's approach much more than having to hunt down some obscure browser setting or trust that it does the right thing.