if you've got to communicate the decryption key separately anyway, might as well just use password protected zip files, no?
You should probably not treat password-protected zips as secure: https://security.stackexchange.com/questions/35818/are-passw...