While the final file mode is reflective of the input file, when compressing or uncompressing, the file can temporarily gain greater permissions than the input and potentially leading to security issues (especially if large files are being handled).

Example: file has mode 600 -> zstd file -> file.zst has mode 644 while compression is happening. (Same happens with unzstd file.zst and file)