Attackers / Malware Developers: "A document as a web app?, What could possibly go wrong?"