The company says it doesn't scan password-protected archives, though Gmail can flag an encrypted attachment, and the Google Workspace service prevents sending protected Zip archives altogether.