Why is Word document phishing even possible in this day and age? Doesn't Windows 7 and above protect against this? Or do users just automatically click YES when Windows asks if it's ok for a program to make changes to the system?
Windows constantly bombards you with elevation prompts, dialog boxes, etc. A large number of people literally do not care at all what the box says they just want it to go away so they can do the thing they were trying to do with their spreadsheet bob from accounting sent over so they can go home to see their kids at 6pm.
If only there was an technique to elevate privileges that wasn't so frequent and required a password input.
I assume you mean macOS, which does seem to work in a somewhat more sensible way.
IME Windows 7 and above are judicious about the elevation prompts, at least compared to Vista. Sadly too many legacy apps still need those privileges. And those users who don't understand the risks may be more likely to be using that kind of older software.