That would only make the xz attack harder, not make it impossible. Just add some step to the action run that fetches blobs from an internet resource you control

That would only make the xz attack harder, not make it impossible. Just add some step to the action run that fetches blobs from an internet resource you control, then swap out the blobs for malicious ones.