The latest application versions of Office 365 include OLE blocking. I have no idea if it is turned on by default - I can check sometime as it would be interesting to find out and potentially helpful to you. Here is some information from Microsoft.

I am pretty certain that the cloud versions of Office 365 do not support OLE. Instead they use the Fluid Framework.