Media player projects are in an arms race with exploit devs, though, especially since Google keeps introducing and popularizing new media formats.

Speaking of which: which project tkaes security more seriously, vlc or mpv?