An archive can contain a file with the permission bits write group or write other set. This could allow others to overwrite the file. An archive can also contain a directory with the permission bits write group or write other set. This could allow others to remove entries from the directory.
This patch clears the bits UNX_IWGRP and UNX_IWOTH from the permissions of files and directories.
patch
This change to UnZip seems to make sense. Note though that administrators of systems looking to restore files tend to want the permissions restored as recorded, so some option may be needed to enable this.