A password-protected ZIP encrypts your files and leaves their names in plaintext. Here is how I closed that hole, and the four things I got wrong doing it.