After re-reading, it sounds like there's an additional "are you sure" flag if the file came from outside your organization. My point is that macros are already

After re-reading, it sounds like there's an additional "are you sure" flag if the file came from outside your organization. My point is that macros are already disabled by default. If you're going to get phished or engineered, then adding more "are you sure" prompts is of questionable value, without trying to sound overly cynical about InfoSec. Bottom line: if the "feature" is not explained in a straight-forward way to a tech-savvy crowd like HN, then I have a lot of questions about its efficacy.