Currently depending on zip 6 with default-features = false still has arbitrary appear in downstream project's Cargo.lock files. It seems to me that this should not happen unless a specific feature is enabled, since it won't be useful for most downstream users.