Good point. That's why I recently requested a "Prompt before macro import" feature, to check macros before import and ask where to place them (ie, a "Revise" folder).
It'd also be good to have a sanitizer as well, something to revise and detect malicious code, and/or alert about possibly malicious/destructive actions before importing a macro.