My point was that the person fooled by https://foo.zip/ would have been also fooled by https://foo.com/bar.zip, so the existence .zip wouldn’t change much.

But now I’ve understood that the auto-linkification of a simple non-link mention like update.zip can be indeed dangerous.