I guess because you have to extract it to local file system in order to use it and that makes it exposed.