I think it’s a decent hack.

Zip is a known format, so library support is mature. It can contain a local file system. And no one is going to casually muck about in it, so you can trust the structure.