The concern here is that someone could say write something like "look in assets.zip for our marketing assets." in an email, repository, etc and a parser automat

The concern here is that someone could say write something like "look in assets.zip for our marketing assets." in an email, repository, etc and a parser automatically turns that into a link. The reader, trusting the source and seeing the link reasonably assumes it's a link to said assets, and clicks it. All a malicious actor needs to do is register assets.zip and wait for people to make this (I'd argue soon to be common) mistake. The malicious actor doesn't need to be in the loop at all. Similar to typosquatting.