It seems if you write a VB console application which uses "shell" to issue the command, and drag this application into word, the resulting Word object will indeed execute the command.

The only security advantage I can see in this arrangement is based on the rather small additional intelligence which may be needed to use vb rather than straight cmd.exe.

This might discourage a few amateur tinkerers but not any serious criminal virus merchants.

EDIT: Or of course, more directly, put a shape or some text in the word file and provide a vb macro responding to a mouse click by executing the command line as above.
But probably the above way makes it possible to drag or copy and paste the object back into Windows Explorer and use it.

"1. You have a rich abundance of routes and options to choose from.
2. But not all of them work."