Generally speaking most dedicated PDF readers haven't implemented the nastier parts of the PDF spec that need a sandbox. Except adobe. They support everything because they wrote it. But they keep making it worse so I can't recommend them.
For Linux users, SELinux's sandbox command works well. (The manual isn't event two printed pages.)