`tar -xf` is not "explicitly asking" for gzip. `tar -zxf` is "explicitly asking" for gzip. I don't really care what vim does, that's a different argument. Ther

`tar -xf` is not "explicitly asking" for gzip. `tar -zxf` is "explicitly asking" for gzip. I don't really care what vim does, that's a different argument. There have been many vulnerabilities in gzip, and in tar implementations that let untrusted input choose how it gets parsed, those vulnerabilities might as well be in tar itself.