pdf.js doesn't work on highest security settings because of JS disabled

Isn't PDF.js a privileged part of browser?

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information