> If they have to redo all their forms anyway, I’d figure they’d at least consider using an Office suite that doesn’t support active content. Which office suit

> If they have to redo all their forms anyway, I’d figure they’d at least consider using an Office suite that doesn’t support active content. Which office suite doesn't these days? MS Office obviously does, Open Office/Libre Office does, Google Sheets does (although Google docs doesn't). There probably isn't even close to as many attacks for these macros as MS office macros, but they can exist. What they need to do is invest in learning how to set up off site backups and basic security principles.