Back in February, Microsoft restricted the execution of macros in Office, so that ones that came from Internet sources were disabled by default. Previously, such execution could be enabled by a single click on a button in the warning banner, but this button was taken away. Now this single-click execution enabler is back <https://arstechnica.com/information-technology/2022/07/microsoft-makes-major-course-reversal-allows-office-to-run-untrusted-macros/>. Clearly it broke too many existing users’ workflows, as insecure as they were. Naturally, most security experts are not happy. Though some accept that customers need more time to adjust to a stricter regime.