Yes, they do, huge mistake

...but a lot of fun!

Explain why it’s a huge mistake, please.

I think the idea is ambiguity between a zip file from your coworkers website and an entirely separate phishing website which downloads an entirely different zip file with a malicious payload.

Anything that introduces unnecessary and previously unforseen ambiguity to the olds is just another path to filling the internet with scams

Browser vendors should just splash users with one of those click-through security warnings. Make it bright yellow.

I'd be very entertained by drama from owners of those domains, but in my opinion, such a thing would be completely justified.

Here’s the problem: the biggest browser vendor is the one selling the domains!

Well, we also have .com as a common extension on Windows machines?

A link reading attachment.zip is no longer a 'safe' file but a eg browser window.

Check out familyphotos.zip

I hate that mentioning example.zip now turns into a link in modern chat programs. At least link preview can be disabled... Also .py is annoying but that one I can understand more why it reasonably needs to exist.

I don't get it, and I'm sure some people fall for the scams, but .com has been a dangerous file format since before the internet became common and that hasn't been much of a problem either.

My guess is that it'll only be a matter of time before .png and .jpg will be TLDs.

If someone is allowed to make .xlsm a TLD I'm 100% quitting the internet.