everything is backed up for reference, but only data is ever restored.

Macro execution is supposed to be disabled on Word/Excel, though I trust that less (and there’s always the issue of some unpatched/zeroday); however, to go through here is more expensive for attackera because much more individual targeting and customization is required.

It is difficult to imagine people who are heavy Excel users being ok with macros being disabled wholesale.

Indeed, they are not heavy excel users. Which is sort of the point: the need for targeted attacks greatly reduces and segments the addressable “market” for the bad guys.

Nah. Point stands, attack can survive the restore inside Office docs because macros are generally allowed.

Good practice. I'm just playing around, devil's advocate.