Yeah, I saw that.
My worry is that this will just make drive-by malware easier.
My worry is that this will just make drive-by malware easier.
(At least quickly thinking about it; I could easily have overlooked some complexity, but barring an unpatched libarchive exploit, I don't think this markedly increases attack surface...and at that point, you could probably make similar arguments about adding any new file format?)