PK3 files can be exploited to have SRB2 load lumps that are not viewable in SLADE or other ZIP tools. An example by @Golden: zip1ficklezip.pk3
ZIP tools often read the final central directory, but SRB2 may not if there are multiple central directories. It's just easier to not allow "holes", or unaccounted for bytes in the file.
