The classic Outlook will remain the default for enterprise customers, at least for another year.
Microsoft just fixed two critical Office vulnerabilities that can be triggered simply by previewing a file in Outlook. No double-clicking or macros required.