On #curl's --max-filesize and --compressed. Should we do something about the "compression bomb" risk?
https://curl.se/mail/archive-2026-03/0000.html
@bagder It would not contradict the documentation if it applied after decompression.
The crux is backwards compat, but maybe that would be acceptable breakage?