And this is why allowing scripts/embedded executable files in document formats has always been a bad idea. There's always someone who will mess it up. Luckily there are some tools for sanitizing documents, such as dangerzone for pdf [0]. But I wish there were standardized docx/pptx/odf/odp with zero scripting capabilities.
[0] https://github.com/firstlookmedia/dangerzone/blob/master/REA...