This is so true. We have engineers who have built complex apps in Excel. They were very "modular" in their design where each workbook in the app was one of several "modules" that made up the application. Talk about a dependency clusterf___.
That said if I throw together a quick & dirty data collection spreadsheet that has simple cleanup macros attached my collectors shouldn't be blocked from entering data against that spreadsheet when using it on a WP or from the web. When macros are disabled they pose no security risk.