So i was unaware google where adding a new set of TLDs, And i share the sentiment of others.

Did anyone think this through or did they just want to add new domains for the sake of it?

I think i'd struggle to tell the difference between a legit and malicious website using a .zip extension (file download vs webpage)

@arstechnica have a great post on it https://arstechnica.com/information-technology/2023/05/critics-say-googles-new-zip-and-mov-domains-will-be-a-boon-to-scammers/

Google pushes .zip and .mov domains onto the Internet, and the Internet pushes back

Will new TLDs undo decades of work to stop malicious links?

Ars Technica