You don't know what's in a zip file until you unpack it. They can put malicious scripts in a zip file, and it's fine so long as it remains unpacked on the server. Once unpacked, they could then use those scripts.
Regardless, File Away doesn't have an auto-unpack, or even a manual unpack feature.