Comment by yazriel

I am more worried about the obvious attack of sending a person a large known plaintext, and then using this to decrypt his tarball.