They have moved image parsing to a separate restricted process. That's way overdue. Wouldn't hurt to have these parsers rewritten with more attention to memory safety, though.