Compilers and Interpreters Are Not Enough to Secure a Compiler

There's a long spectrum between full turn and complete interpreter. A lot of these compression algorithms, JPEG and some of these other formats that you brought up are like little interpreters. And if they're not implemented perfectly correct and you don't know that that's what it's doing, you're executing some arbitrary code.