if someone sends a CSV and it opens in excel just by double-clicking, then people are going to double-click. You can't stop people doing things the easy way except by actually preventing it from working.
(Corrupting the data silently so they may not notice doesn't count as preventing it from working)