It doesn't matter if an SSH server is running or not. This is just another avenue for people's systems to be compromised and for malicious actors to exfil data securely. Couple the SSH addition with Excel natively running JavaScript functions means Windows-based hosts are now more lucrative than ever.

For normal users, they have no use of a command-line SSH terminal, and they would likely not even know what such a function would be used for. Its just shitty decisions made by Microsoft with nearly no value added benefit.