I suppose I wasn't the only one with that thought in mind because this self-hosted app attempts to fix exactly that. Called ...

Vulnerability in the popular Rust library Async-tar could allow attackers to smuggle archive entries and execute arbitrary code remotely.