With features like that, who needs keyloggers?

from here and here

I know it's not intentionally a keylogger, but there isn't much separating it from one. It does record keystrokes and it does output them without your knowledge or consent. The main difference is that it doesn't provide a way to get your keystrokes into a particular hacker's hands - although if it just starts spitting them out randomly it is entirely possible some of your sensitive keystrokes may find their way into some random hacker's hands. That would be very unlucky, but this is Friday the 13th.

We're never going to have trustworthy computing at this rate

from here and here

Not that I trust Microsoft's vision of "trustworthy computing", but people have been sounding the alarm about office macro malware literally since the macro feature was invented. To have macros finally disabled after all these years and then almost immediately re-enabled again is a huge disappointment.