Oh, and FTR, Excel gives a warning before opening the file. So they at least have thought through this vector (if you want to call it that).