Yes on PDFs in this case. It is designed to exploit the PDF reader when you open it. Though less common today it's still an avenue of attack to watch out for. It depends on the reader too but why take a chance if something is detected