There needs to be some consideration given to different applications. You don't want to allow zip or exe in regular posting, but you may want to allow zip in Downloads.
By the way, I have the same broad issue. I've seen a member, in their helpfulness, send the Mozilla installer packager executable to another member who - bless their heart - actually downloaded and installed an executable file from a random person on the internet.