It's not about running EXEs, it's about network connections:
Windows 10 update 1803 does not open *network connections* on executables files on SMBv1 share.
Explains why my ADS was blocked.
People using Samba with SMB2 disable will have this problem too.