unserialize requires a string to be passed but $this->filesystem->read($file) can return FALSE when something goes wrong.
So we need to check the result of the read before sending it to unserialize.