Review .NET for BinaryFormatter and typed serializers

BinaryFormatter, LosFormatter, and type-permissive JSON settings are direct RCE in .NET applications.