We don't want to block all exe/zip but maybe we do? And certainly Lantern.io needs to be added to proxy avoidance or something.