You also need to enable macros for Word "viruses" to work, but somehow they do… IMHO, this increases the attack surface of browsers by a fair amount to little

You also need to enable macros for Word "viruses" to work, but somehow they do… IMHO, this increases the attack surface of browsers by a fair amount to little practical gain. But then I'm not impressed with the "browsers are all you need" mentality, so I'm a bit biased.