
The complexity of Adobe Reader is the main problem with it
If Adobe Reader was JUST a PDF view and print application WITHOUT any form of scripting then it would be far safer (and smaller). (The same also applies to Flash - a version with no scripting would be far safer.) The scripting versions of these programs are needed only infrequently but the UNWANTED presence of the scripting capability increases the hazards in Web browsing for very little gain.