Mysterious “Follina” zero-day hole in Office – what to do?

News has emerged of a “feature” in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn’t help!