Security patch for Excel doesn’t add up