I have this application being handed to me that lets users enter data into an
infopath form using the infopath client, and then it submits the data to a
sharepoint form library. When this happens, on the SharePoint server, some
PowerPoint slides are created, uploaded to picture library. In order to make
this all work, they had to install Infopath VBA and PPT on the server, which is
an internal facing only server.

A lot of questions are coming up around security and some people want to change
the application to work against OpenXML. I don't see much of a difference in
making the change, however, I know nothing about OpenXML.

Can anyone help me understand why one is better / more secure than the other?