Because Adobe stopped releasing security patches in 2017, opening a malicious PDF with Reader XI is like leaving your front door open. Hackers have a library of known exploits for this specific version.