Euro-Office and OnlyOffice don't "only support" OOXML. Where did you get that idea?

From the fact ODF "support" is an awkward import/export function. It's not a first class format.

The code is open so where do you suppose all this supposed spyware is hiding?

On their live service. They don't publish the spyware with the code they choose to open, obviously. 😃