The -dSAFER finding is the uncomfortable part, since that flag is the mitigation most upload pipelines reach for first. Ghostscript sitting as a hidden dependency behind every innocent PDF preview feature is exactly why this class of bug keeps resurfacing.