pull down to refresh

Why is the MicroSD safer than the Camera? Isn't the autorun* ability of the card an attack vector?
[*] Is it still a thing on Windows?