This is simpler and can count as hardening
because we don't call async_zip parser anymore
just to check if received file is a webxdc.
This way if ZIP parser is buggy and e.g. panics,
or gets into infinite loop, or is accidentally quadratic,
or allocates a lot of memory, this cannot be triggered
by just sending a file.