If the argument is that they should be in gnumeric or open office that's one thing, but even they have scripting languages in them.
There is source that needs to be written and compiled and tested in secure environments.