Enabling JavaScript should make Excel more powerful, but increasing access points makes it even more of a web security nightmare than it already is.