Re: call me "Mr Thickee" but.....
sounds like you still have to be tricked into clicking on something stupid
As others have noted, it's quite common to have programs that automatically process compressed archives, and many of them use 7-zip code to do so.
But even if that weren't the case, "tricked into clicking" is not a sufficient bar. Even security-conscious users aren't good at perfect vigilance, and expecting ordinary users to avoid malware is rank foolishness.
Recent studies suggest spear phishing has around a 90% success rate if at least ten people in an organization are targeted. We've had decades of administrators complaining about people doing "something stupid", and it hasn't helped at all.