you are clearly right mars.
but i don't like this way, i want only macros from external files to be blocked.
internal comments are considered half-safe.
half, because a warning is displayed when loading an untrusted vfs file.
SO, next build will make internal comments (like the one above) work with macros.