On #curl's --max-filesize and --compressed. Should we do something about the "compression bomb" risk?

https://curl.se/mail/archive-2026-03/0000.html

curl: --max-filesize and --compressed

@bagder It would not contradict the documentation if it applied after decompression.

The crux is backwards compat, but maybe that would be acceptable breakage?