Zip files are temporarily decompressed on the computer’s drive while you work on them (and possibly in the computer’s memory, too), which are still easily accessible to any running process…
If Obsidian had a native encryption system in place, that would probably make things harder to bypass.