On Saturday, 18 June 2016 at 19:52:20 UTC, Observer wrote:
in the context of image decoding, you're often handling untrusted data from external sources
Not always though. The main case I'd use a little single-file thing is for files that I created and packaged with the application myself, but wanted to be small for distribution. If I wanted my program to do something naughty, I wrote it, I'd just make it do something naughty!