There's a really great history on this here: https://insights.sei.cmu.edu/blog/who-needs-to-exploit-vulnerabilities-when-you-have-macros/ https://insights.sei.

There's a really great history on this here: https://insights.sei.cmu.edu/blog/who-needs-to-exploit-vulnerabilities-when-you-have-macros/ https://insights.sei.cmu.edu/blog/who-needs-to-exploit-vulne... In summary, each successive version of Office actually walked back the tone of the warning if you tried to enable macros. Office 2000 was still more strict than what we'll have after this change. Office 2010 reduced it to the one yellow bar and a single click enable. Edit: For those reading, this has been for a while something of an embarrassment. The creator of mimikatz only just made this callout in response to Microsoft's security advertising: https://nitter.net/gentilkiwi/status/1488937687281242116#m https://nitter.net/gentilkiwi/status/1488937687281242116#m Further edit: There's a statement regarding the scale of this change here: https://nitter.net/GossiTheDog/status/1490740535849623552#m https://nitter.net/GossiTheDog/status/1490740535849623552#m