That's like encoding malware in a picture and calling it dangerous

But malware wrapped as video (or any other doc or media format) still needs to be executed, right? So if you don't give that file execute permission (which Linux doesn't give by default) and open it through media player or something, could said potential malware still run? I thought it couldn't unless the player itself is vulnerable

kern.exe.mp4 LOL

and the rest are 0days that sell for millions