I think his point is that if an attacker wants to give you bad data, there is already zero barrier to editing an XML file inside a zip.