> "Because your application is run as zipapp, it must be zip safe. ... The main violation against zip safety is using filesystem API..."

I like everything about this, except for the possibility that zipapp constraints could haunt me.