Someone will definitely get 42.zip or 42kb.zip just to host a “zip bomb as a service”.

On a more serious note, new gTLDs are so spammy, and “.zip” as others have mentioned will surely lead to some surprises somewhere.