Because SVG requires for us to scan it for exploits and we are not yet setup for it. One example from recent history: https://www.exploit-db.com/exploits/51656 🐶🐾🫡