[Stierlitz]

> Why the F does a text processor needs to execute anything at first place when reading a document? this is madness.

If you're stuck on Windows, make normal.dotm readonly.

> And yes, the solution is, on top of every possible IT security practice, and linux everywhere ..

To keep people stuck on Windows, the Microsoft mantra used to be, our stuff works better with our stuff. Since most OS functionality is moving to the msCloud. Regardless of the OS, you'll be paying the yearly software rent to Microsoft.