Compile your PDF viewer with Softbound [1], load a stripped Linux LiveCD containing it on disposable machine, download PDF with sandboxed browser to RAMdisk, and load with that viewer in a sandbox. Only so much they can do at that point. Use a non-Intel, non-ARM processor to throw them off further. Hand-type into trusted computer any insights you glean from the PDF.
A lot of work just to safely read a PDF from the enemy, eh?
[1] http://www.cs.rutgers.edu/~santosh.nagarakatte/softbound/