Do not use exiv2
I think that someone, at some point, mentioned exiv2 on MAT's mailing list. I tried to use it with MAT, but it didn't have enough feature.
I'm now convinced, due to how they manage vulnerabilities that even with the required features, we do no want to use it.
This is not an issue per se, but more a reminder about why we shouldn't do something.