pull down to refresh

Why is the MicroSD safer than the Camera? Isn't the autorun* ability of the card an attack vector?

[*] Is it still a thing on Windows?