>When using an "append from" with an Excel file, are you risking a virus being opened?

Not if it's a macro virus. We can't execute macro code when importing because, well, we don't have the VBA engine in VFP. :-)