Preferably on a per-request basis it should be possible to set the minimum size before the archive bomb checker kicks in. Currently it's 10MB, but for a 'trusted website' users may want to increase it if they know some files may have 'suspicious' decompression ratios. Or they know the systems their code will run on is guaranteed to have more RAM available than this so decompressing e.g. >100MB of an archive bomb would not be considered a problem.